Introduction

Nowadays file security is more and more important to all sizes companies, it has been a major task for IT professional. Threats to file security – both external and internal – is extensive and growing. To maintain the confidentiality, integrity and availability of the file could be complicated. EaseFilter can help address these threats by securing sensitive files so that they’re always under your control. With cyber-attacks ravaging the networks of governments and corporations, enterprise IT and security professionals need to adjust their data protection strategies. EaseFilter can help protect your enterprise from threats such as external hacks and internal leaks. Whether you need to enable personal productivity, facilitate team collaboration, or mobilize and transform your entire business, EaseFilter Comprehensive File Security SDK is the best choice for secure file collaboration.

EaseFilter Comprehensive File Security SDK

EaseFilter Comprehensive File Security SDK is a set of file system filter driver software development kit which includes file monitor filter driver, file access control filter driver, transparent file encryption filter driver, process filter driver and registry filter driver. In a single solution, EaseFilter Comprehensive File Security SDK encompasses file security, digital rights management, encryption, file monitoring, file auditing, file tracking, data loss prevention, process monitoring and protection, and system configuration protection. EaseFilter file system filter driver is a kernel-mode component that runs as part of the Windows executive above the file system. The EaseFilter file system filter driver can intercept requests targeted at a file system or another file system filter driver. By intercepting the request before it reaches its intended target, the filter driver can extend or replace functionality provided by the original target of the request. The EaseFilter file system filter driver can log, observe, modify, or even prevent the I/O operations for one or more file systems or file system volumes.

EaseFilter File System File I/O Monitor

The EaseFilter File System File I/O Monitor can proactively track, audit, report, alert on and respond to, all access to files and folders on Windows systems in real time. With the real-time notifications of the file access, it can help you to detect and stop advanced persistent security threats to your sensitive files. File System Monitor Filter Driver SDK can monitor the file system I/O activities on the fly. With file system monitor filter you can monitor the file activities on file system level, capture file open, create, overwrite, read, write, query file information, set file information, query security information, set security information, file rename, file delete, directory browsing and file close I/O requests. Create your own Continuous Data Protection (CDP) software to log the file update information, write information with offset and length in real time. Audit your file content, you can intercept any file system call, analyze the content and log it. Create Access Logs, you will know who, when, what files were accessed. Journal the file update information. This control may be based on any file parameters, such as its location, type, size, etc.

EaseFilter File System File Access Control and File Protection

EaseFilter File System Control Filter Driver intercepts the various requests going to the file system. If the request matches one of the rules specified by the application, the driver performs the action defined by the filter rules. EaseFilter File System Control Filter Driver SDK provides you with an easy way to develop the Windows application which can implement software for file protection, file access control and security control. Your application can allow or deny the request, modify the request with your own data, or post-process the request. Your application can fully control file open/create/overwrite, read/write, query/set file attribute/size/time security information, rename/delete, directory browsing these I/O requests.

You can setup secure sandbox with control filter driver to protect your sensitive files, put all your sensitive files to the sandbox folder, explicitly block the file access from unauthorized users or processes, prevent the files from being changed, deleted or renamed, or hide the files, prevent the files being copied out from the sandbox. With the sandbox you also can restrict the untrusted applications execution, safeguard your Windows system, prevent the untrusted applications from changing the data or configuration outside of the sandbox.

Transparent On-access, Per-File Encryption Solution

Transparent file encryption (TFE) performs real-time I/O encryption and decryption of the files in any block data with 16 bytes. The encryption uses a 256 bits symmetric key to encrypt or decrypt the data with AES encryption algorithm. TFE protects data “at rest”, meaning the data and files. It provides the ability to comply with policies which can be applied by users, processes and file type. This allows only authorized users and processes to access the encrypted files, unauthorized users and processes can’t access the encrypted files. EaseFilter transparent file encryption filter driver creates an isolation filter providing a caching data virtualization layer. A given file may have two views of the data: one encrypted, the other decrypted. For each open instance of a file, as represented by a file object, it will present the encrypted data to unauthorized processes or users, present the decrypted data to authorized processes or users.

Secure File Sharing With Digital Rights Management

With control and encryption filter driver, you can implement the secure file sharing application easily. Your application embeds digital rights management (DRM) protection in your files, so your content stays secure everywhere it goes, and you can control users’ ability to view, edit, copy, download, or forward files, even after those files are downloaded or shared with third parties. With EaseFilter Filter Driver, your employees can safely share documents, grant access to authorized users only, and revoke access anytime and anywhere if required. This access can also be set to expire after a set timeframe. EaseFilter provides file-level security combined with a user experience that’s as easy and intuitive as any consumer solution. It’s also the only solution that encrypts files not just at rest or in transit, but also while they’re in use, reducing the risk of a breach or loss of data and information, use rights management to retain control even in the cloud. 

Registry Monitoring and Protection

Easefilter registry filter driver is a kernel-mode driver that filters registry calls, it provides you an easy way to develop Windows application for registry monitoring and protection. With the EaseFilter Registry Filter Driver, it enables your application to protect Windows core registry keys and values and to prevent potentially damaging system configuration changes, besides operating system files. By registering a RegistryCallback routine in the registry filter driver, it can receive notifications of each registry operation before the configuration manager processes the operation. A set of REG_XXX_KEY_INFORMATION data structures which contain information about each registry operation will return to your user mode application, your application can allow the registry access or change to authorized processes or users, and deny the registry access to unauthorized processes or users.

Process Access Monitoring and Protection

Monitoring the process and thread creation or termination, get the notification of the process and thread operations when you register the events.Prevent the untrusted executable binaries (malwares) from being launched, protect your data being damaged by the untrusted processes.
Process monitor and protector screenshot