Abstract: Concerning the access control security for removable storage, an access control method for removable storage based on File System (FS) filter driver was proposed. This method identified more than one removable storage device volumes and unique identifier for each volume, and controlled the volume according to its access. Additionally, through monitoring the process execution, this method prevented and killed Trojan. Using this method, the current popular removable storage devices were controlled to achieve a better result, enhancing the safety of using removable storage devices.

Key words: File System (FS) filter driver, removable storage, access control, volume, uniqueness

摘要： 针对移动存储在内网中的安全使用问题，提出了基于文件过滤驱动的移动存储访问控制方法。该方法通过识别移动存储设备生成的多个卷和每个卷的唯一标识，并结合每个卷的访问权限，实时进行控制；通过监控进程的执行，防范和查杀卷中存储的病毒木马。该方法有效地控制了移动存储设备的使用，增强了移动存储设备使用过程中的安全性。

关键词: 文件过滤驱动, 移动存储, 访问控制, 卷, 唯一性