Kernel-mode

This paper analyzes some technologies of TDI in the Windows, including the structure of Input/ Output Request Packet and its procedures of processing, some major kernel-mode driver objects and the relationships among them. It introduces the design of driver and its debugging methods.

研究了Windows的TDI技术，包括输入输出请求包的结构和处理过程、几种重要的内核模式驱动对象及它们之间的联系，介绍了如何在TDI上设计驱动程序及其调试方法。

Based on the above three modules, this system achieve a tamper detection, tamper recovery, system alarms and other basic functions eliminating the possibility of hackers illegally tampering with Web pages from both the user mode and kernel-mode.

基于以上三个模块，本系统实现了篡改检测，篡改恢复，系统报警等基本功能，并从用户态以及核心态杜绝了黑客非法篡改网页的可能性。

At the last after the encrypting and decrypting performance test for this system, it can be indicated that the system's encryption and decryption in the kernel-mode could not affect users' operation in the user-mode.

文章最后对文件加解密性能进行了测试，结果表明该系统在内核对文件动态加解密的操作不会影响到用户对文件的访问速度。