easefilter14

[easefilter14]

EaseFilter Comprehensive File Security SDK

In today's digital landscape, file security has become increasingly crucial for companies of all sizes, posing a significant challenge for IT professionals. Threats to file security—both external and internal—are extensive and growing. Maintaining the confidentiality, integrity, and availability of files can be complex. EaseFilter helps address these threats by securing sensitive files, ensuring they remain under your control. With cyberattacks impacting the networks of governments and corporations, enterprise IT and security professionals must adapt their data protection strategies. EaseFilter can help protect your enterprise from threats such as external hacks and internal leaks. Whether you need to enhance personal productivity, facilitate team collaboration, or transform your entire business, the EaseFilter Comprehensive File Security SDK is an excellent choice for secure file collaboration.

EaseFilter Comprehensive File Security SDK

The EaseFilter Comprehensive File Security SDK is a suite of file system filter driver software development kits, including:

File Monitor Filter Driver

File Access Control Filter Driver

Transparent File Encryption Filter Driver

Process Filter Driver

Registry Filter Driver

This File Security Solution encompasses file security, digital rights management, encryption, file monitoring, auditing, tracking, data loss prevention, process monitoring and protection, and system configuration protection.

The EaseFilter file system filter driver is a kernel-mode component that operates as part of the Windows executive, above the file system. It can intercept requests targeted at a file system or another file system filter driver. By intercepting requests before they reach their intended targets, the filter driver can extend or replace the functionality provided by the original target. It can log, observe, modify, or even prevent I/O operations for one or more file systems or volumes.

EaseFilter File System File I/O Monitor

The EaseFilter File System File I/O Monitor proactively tracks, audits, reports, alerts on, and responds to all access to files and folders on Windows systems in real time. With real-time notifications of file access, it helps detect and stop advanced persistent security threats to your sensitive files.

The File System Monitor Filter Driver SDK monitors file system I/O activities on the fly. It allows you to monitor file activities at the file system level, capturing operations such as file open, create, overwrite, read, write, query/set file information, query/set security information, rename, delete, directory browsing, and file close I/O requests.

You can create your own Continuous Data Protection (CDP) software to log file update information, including write operations with offset and length in real time. Audit your file content by intercepting any file system call, analyzing the content, and logging it. Create access logs to know who accessed which files and when. Journal file update information based on parameters such as location, type, size, etc.

EaseFilter File System File Access Control and File Protection

The EaseFilter File System Control Filter Driver intercepts various requests to the file system. If a request matches one of the rules specified by the application, the driver performs the action defined by the filter rules. This SDK provides an easy way to develop Windows applications that implement file protection, access control, and security control.

Your application can allow or deny requests, modify them with your own data, or post-process them. You can fully control I/O requests such as file open/create/overwrite, read/write, query/set file attributes/size/time/security information, rename/delete, and directory browsing.

Set up a secure sandbox with the control filter driver to protect your sensitive files. Place all sensitive files in the sandbox folder, explicitly block access from unauthorized users or processes, prevent files from being changed, deleted, or renamed, or hide them. The sandbox can also restrict untrusted applications from accessing these files.

Transparent On-access, Per-File Encryption Solution

Transparent File Encryption (TFE) performs real-time input/output (I/O) encryption and decryption of files in block sizes of 16 bytes. It uses a 256-bit symmetric key with the AES encryption algorithm to secure the data. TFE protects data at rest, meaning it secures stored files and data from unauthorized access.

TFE allows organizations to enforce data protection policies based on users, processes, and file types. Only authorized users and processes can access the decrypted files, while unauthorized users and processes are restricted from accessing the encrypted content.

The EaseFilter Transparent File Encryption filter driver implements an isolation filter that provides a cached data virtualization layer. As a result, each file can have two simultaneous views: one encrypted and one decrypted. For each open instance of a file (represented by a file object), the system presents encrypted data to unauthorized users or processes and decrypted data to authorized ones, ensuring secure and selective access.

Secure File Sharing With Digital Rights Management

With the Control and Encryption Filter Drivers, you can easily implement a secure file sharing application. Your application can embed Digital Rights Management (DRM) protection directly into the files, ensuring your content remains secure wherever it goes. You can control users' ability to view, edit, copy, download, or forward files—even after they’ve been downloaded or shared with third parties.

Using the EaseFilter Filter Driver, employees can safely share documents by granting access only to authorized users and revoking access at any time, from anywhere. Access can also be configured to automatically expire after a predefined period.

EaseFilter delivers file-level security with a user experience that is as intuitive and seamless as any consumer-grade solution. It is also unique in its ability to encrypt files not only at rest and in transit, but also while in use, significantly reducing the risk of data breaches or loss. Rights management ensures that you maintain full control over your data—even in the cloud.

Registry Monitoring and Protection

The EaseFilter Registry Filter Driver is a kernel-mode driver that filters registry calls, providing a simple and efficient way to develop Windows applications for registry monitoring and protection.

With the EaseFilter Registry Filter Driver, your application can protect critical Windows registry keys and values, preventing potentially harmful system configuration changes—especially those targeting core operating system components.

By registering a RegistryCallback routine in the driver, your application can receive notifications for every registry operation before it is processed by the Configuration Manager. A set of REG_XXX_KEY_INFORMATION data structures—each containing details about the corresponding registry operation—is returned to your user-mode application. Based on this information, your application can allow or deny registry access or modifications, granting permission only to authorized users or processes and blocking access from unauthorized ones.

Monitor and Protect Processes in Real Time

Monitor process and thread creation or termination by registering for event notifications. Your application can receive immediate alerts when processes or threads are created or terminated, allowing for real-time tracking and response.

Prevent untrusted executable binaries—such as malware—from being launched. This helps protect your system and data from being accessed or damaged by unauthorized or malicious processes.

Secure Sandbox Solution

A sandbox is a secure, isolated, and tightly controlled environment where programs can run and data can be protected without risking the rest of the system. Sandboxes restrict what a program can do, granting only the minimum permissions required—nothing more—thereby reducing the risk of abuse or exploitation.

The EaseFilter Secure Sandbox allows you to safely run untrusted Windows programs in a controlled environment. It prevents malicious or malfunctioning applications from affecting your system and ensures your confidential files remain protected within the sandbox.

[easefilter14]

CloudTier Storage Tiering Filter Driver SDK

What is the CloudTier Storage Tiering SDK

The CloudTier Storage Tiering SDK is a Hierarchical Storage Management (HSM) file system filter driver development kit. It is a data storage technique that automatically moves data between high-cost and low-cost storage media. It allows you to free up on-premise storage capacity transparently, by moving out cooler data to the cloud storage, thereby reducing capital and operational expenditures.

 The CloudTier Storage Tiering SDK provides you a simple and low-cost solution to integrate your on-premise storage to cloud storage infrastructure in a seamless, secure, and transparent fashion. There is no interruption to migrate your on-premise files to the remote cloud storage, so you don't need to change your existing applications and infrastructure. It uses the on-premises storage as a tier 0 storage (hot storage), uses the public cloud storage as a tier 1 storage (cold storage). So you can connect the cloud storage as a second tier. Your application can use the cloud storage just like the local storage without any changes. CloudTier Storage Tiering Filter Driver SDK

Understand The File System Filter Driver

A file system filter driver intercepts requests targeted at a file system or another file system filter driver. By intercepting the request before it reaches its intended target, the filter driver can extend or replace functionality provided by the original target of the request. File system filtering services are available through the filter manager in Windows. The Filter Manager provides a framework for developing File Systems and File System Filter Drivers without having to manage all the complexities of file I/O.

How Does The Storage Tiering Work

The storage tiering is a comprehensive technology to access the remote storage transparently. The CloudTier storage SDK integrates with the local file system. When an application accesses a stub file, the CloudTier Filter Driver will bring back the remote storage’s data back to the application or rehydrate the stub file as a normal physical file based on the recall policy.

A stub file looks and acts like a regular file, it has the same file attributes with the original physical file (file size, creation time, last write time, last access time), it also keeps the original file’s security. A stub file is a file with sparse file and reparse point attributes, your customized tag data can be embedded to the stub file. A stub file doesn’t take the storage space for the file data, it only keeps the meta data of the file.

The Use Cases of CloudTier Storage Tiering

Cloud storage tiering can be widely used in telecommunications, government, oil, medical and other industries.

Healthcare Data Archiving. Healthcare providers are increasingly required to retain patient medical record data for multi-year periods. Storage requirements for patient data can quickly escalate when the records include high resolution images and ultrasound content.

Business Policy Mandated Data Archiving. Companies can generate PB’s of data in the course of day to day operations and to meet legal compliance requirements. Archive Storage can work with Smart Archiving offerings from ISV’s to create a low cost, content archiving solution.

Digital Media Content Retention. Creators can generate PB’s worth of video and picture content that is used in the development of original digital media. Archive Storage gives creators a low-cost storage repository for original source content. File-level tiering makes it easy to shift from cold to hot storage should the need arise to use that content for another project.

Security/Public Safety data retention. As the number and sophistication of threats to personal and business safety continue to increase, so does the demand for video surveillance. Public and now private sector companies generate TB’s of surveillance footage daily in the course of protecting their citizens and assets. Archive Storage is a low-cost option for storing that data.