| 摘要 |
A method of protecting a storage device for a Windows operating system. The method is divided into a write-proof method, a delete-proof method and a hidden partition method, which code the drivers of Lower Filter Device Object, Upper Filter Device Object, Partition n Lower Filter Device Object and Partition n Upper Filter Device Object and inserts the objects to the corresponding positions of Partition n Functional Device Object, the Disk Functional Device Object and the Bus Functional Device Object, thereby building a driver configuration respectively for the write-proof method, the delete-proof method and the hidden partition method. Thus, the objects can intercept and process a desired IRP when the IRP passes through the driver configuration.
|
