Secure Virtual Drive-Final year projects for cse

Mission Assertion To bolster the discretionary entry management mechanism on Home windows 2000 via the creation of safe Digital Drives.

Motivation and Targets Home windows 2000 has two types of entry management over objects. The primary kind—discretionary entry management—is the safety mechanism that most individuals consider after they consider safety underneath Home windows 2000. It’s the strategy by which house owners of objects (reminiscent of information or printers) grant or deny entry to others. When customers log in, they’re given a set of safety credentials, or a safety context. After they try to entry objects, their safety context is in comparison with the entry management listing on the article they’re making an attempt to entry to find out whether or not they have permission to carry out the requested operation.

Privileged entry management is important for these occasions when discretionary entry management isn’t sufficient. It’s a technique of guaranteeing that somebody can get to protected objects if the proprietor isn’t out there. For instance, if an worker leaves an organization, the administrator wants a technique to achieve entry to information which may have been accessible solely to that worker. In that case, underneath Home windows 2000, the administrator can take possession of the file in an effort to handle its rights as essential.

With a privileged entry management over objects, a consumer with administrative privileges can tamper with the information of different customers, make modifications in them and even delete them. There are conditions the place this privileged entry of a consumer over objects just isn’t solely undesirable however may trigger heavy injury to the group (take into account a consumer modifying a young doc). A company prefers to depend on the system than trusting these with administrative privileges.

We try to bolster the discretionary entry in WINDOWS 2000, which allows a consumer to guard his/her knowledge from being tampered by customers with privileged entry to the system. Our project is pushed by the idea of polyinstantiation of widespread sources resulting in robust separation of customers.

The simplest resolution that involves the thoughts is to offer the consumer with encryption software program. No matter paperwork the consumer desires to guard he merely encrypts it. Even the administrator can not decrypt this doc.

But when one seems fastidiously on the difficulty one finds that the administrator can nonetheless corrupt or delete the consumer’s knowledge. Additionally the existence of the info may be identified. Then additionally if we glance from the standpoint of the consumer’s comfort he has to explicitly specify which information must be encrypted.

Our goal is to offer the consumer with a handy mechanism to guard his knowledge. We’re offering each consumer his/her personal safe digital disk drive inaccessible and invisible to each different consumer, even the system administrator. The safe digital drive is sort of a secure or a vault, what’s inside it’s identified and accessible solely to the proprietor.

• Win-2000 Working System
• Driver Improvement Equipment(DDK)
• Softice Debugger
• OSR Loader
• DBGView