EaseFilter Comprehensive File Security SDK

 

In today's digital landscape, file security has become increasingly crucial for companies of all sizes, posing a significant challenge for IT professionals. Threats to file security—both external and internal—are extensive and growing. Maintaining the confidentiality, integrity, and availability of files can be complex. EaseFilter helps address these threats by securing sensitive files, ensuring they remain under your control. With cyberattacks impacting the networks of governments and corporations, enterprise IT and security professionals must adapt their data protection strategies. EaseFilter can help protect your enterprise from threats such as external hacks and internal leaks. Whether you need to enhance personal productivity, facilitate team collaboration, or transform your entire business, the EaseFilter Comprehensive File Security SDK is an excellent choice for secure file collaboration.

EaseFilter Comprehensive File Security SDK

The EaseFilter Comprehensive File Security SDK is a suite of file system filter driver software development kits, including:

·         File Monitor Filter Driver

·         File Access Control Filter Driver

·         Transparent File Encryption Filter Driver

·         Process Filter Driver

·         Registry Filter Driver

This File Security Solution encompasses file security, digital rights management, encryption, file monitoring, auditing, tracking, data loss prevention, process monitoring and protection, and system configuration protection.

The EaseFilter file system filter driver is a kernel-mode component that operates as part of the Windows executive, above the file system. It can intercept requests targeted at a file system or another file system filter driver. By intercepting requests before they reach their intended targets, the filter driver can extend or replace the functionality provided by the original target. It can log, observe, modify, or even prevent I/O operations for one or more file systems or volumes.

EaseFilter File System File I/O Monitor

The EaseFilter File System File I/O Monitor proactively tracks, audits, reports, alerts on, and responds to all access to files and folders on Windows systems in real time. With real-time notifications of file access, it helps detect and stop advanced persistent security threats to your sensitive files.

The File System Monitor Filter Driver SDK monitors file system I/O activities on the fly. It allows you to monitor file activities at the file system level, capturing operations such as file open, create, overwrite, read, write, query/set file information, query/set security information, rename, delete, directory browsing, and file close I/O requests.

You can create your own Continuous Data Protection (CDP) software to log file update information, including write operations with offset and length in real time. Audit your file content by intercepting any file system call, analyzing the content, and logging it. Create access logs to know who accessed which files and when. Journal file update information based on parameters such as location, type, size, etc.

EaseFilter File System File Access Control and File Protection

The EaseFilter File System Control Filter Driver intercepts various requests to the file system. If a request matches one of the rules specified by the application, the driver performs the action defined by the filter rules. This SDK provides an easy way to develop Windows applications that implement file protection, access control, and security control.

Your application can allow or deny requests, modify them with your own data, or post-process them. You can fully control I/O requests such as file open/create/overwrite, read/write, query/set file attributes/size/time/security information, rename/delete, and directory browsing.

Set up a secure sandbox with the control filter driver to protect your sensitive files. Place all sensitive files in the sandbox folder, explicitly block access from unauthorized users or processes, prevent files from being changed, deleted, or renamed, or hide them. The sandbox can also restrict untrusted applications from accessing these files.

Transparent On-access, Per-File Encryption Solution

Transparent File Encryption (TFE) performs real-time input/output (I/O) encryption and decryption of files in block sizes of 16 bytes. It uses a 256-bit symmetric key with the AES encryption algorithm to secure the data. TFE protects data at rest, meaning it secures stored files and data from unauthorized access.

TFE allows organizations to enforce data protection policies based on users, processes, and file types. Only authorized users and processes can access the decrypted files, while unauthorized users and processes are restricted from accessing the encrypted content.

The EaseFilter Transparent File Encryption filter driver implements an isolation filter that provides a cached data virtualization layer. As a result, each file can have two simultaneous views: one encrypted and one decrypted. For each open instance of a file (represented by a file object), the system presents encrypted data to unauthorized users or processes and decrypted data to authorized ones, ensuring secure and selective access.

Secure File Sharing With Digital Rights Management

With the Control and Encryption Filter Drivers, you can easily implement a secure file sharing application. Your application can embed Digital Rights Management (DRM) protection directly into the files, ensuring your content remains secure wherever it goes. You can control users' ability to view, edit, copy, download, or forward files—even after they’ve been downloaded or shared with third parties.

Using the EaseFilter Filter Driver, employees can safely share documents by granting access only to authorized users and revoking access at any time, from anywhere. Access can also be configured to automatically expire after a predefined period.

EaseFilter delivers file-level security with a user experience that is as intuitive and seamless as any consumer-grade solution. It is also unique in its ability to encrypt files not only at rest and in transit, but also while in use, significantly reducing the risk of data breaches or loss. Rights management ensures that you maintain full control over your data—even in the cloud.

Registry Monitoring and Protection

The EaseFilter Registry Filter Driver is a kernel-mode driver that filters registry calls, providing a simple and efficient way to develop Windows applications for registry monitoring and protection.

With the EaseFilter Registry Filter Driver, your application can protect critical Windows registry keys and values, preventing potentially harmful system configuration changes—especially those targeting core operating system components.

By registering a RegistryCallback routine in the driver, your application can receive notifications for every registry operation before it is processed by the Configuration Manager. A set of REG_XXX_KEY_INFORMATION data structures—each containing details about the corresponding registry operation—is returned to your user-mode application. Based on this information, your application can allow or deny registry access or modifications, granting permission only to authorized users or processes and blocking access from unauthorized ones.

Monitor and Protect Processes in Real Time

Monitor process and thread creation or termination by registering for event notifications. Your application can receive immediate alerts when processes or threads are created or terminated, allowing for real-time tracking and response.

Prevent untrusted executable binaries—such as malware—from being launched. This helps protect your system and data from being accessed or damaged by unauthorized or malicious processes.

Secure Sandbox Solution

A sandbox is a secure, isolated, and tightly controlled environment where programs can run and data can be protected without risking the rest of the system. Sandboxes restrict what a program can do, granting only the minimum permissions required—nothing more—thereby reducing the risk of abuse or exploitation.

The EaseFilter Secure Sandbox allows you to safely run untrusted Windows programs in a controlled environment. It prevents malicious or malfunctioning applications from affecting your system and ensures your confidential files remain protected within the sandbox.