The Implementation of Hard-Disk Protection Method Based on Disk Filter Driver

In this paper, it analyzes the working mechanism for the hard disk protection based on the current disk filter driver. The core ideology of the mechanism is to redirect the I/O request packet to the disk operation and to restore data automatically after restart the system in the case of transparent operating system to its upper storey. Also, it specifically analyzes the safety trouble by new virus, like the emerging virus, which can penetrate through the filter driver and results the failure of disk protection, and realizes a method to prevent this penetration. With monitoring the IRP in the kernel layer of operating system, it can identify the requests which have the virus read and write features and prevent it from sending requests to real disk. These methods enhance the protection function of operating system and improve the security of the hard disk protection system.