Windows Kernel Security and Driver Development

The predecessors of this book are "Reading the Book at Night - From Assembly Language to Windows Kernel Programming" and "Fishing Alone in the Cold River - Windows Kernel Security Programming". Driver development related to Windows client security software development is the subject of this book. The program usage environments in the book range from 32-bit to 64-bit, and from Windows XP to Windows 8. Most programs can run on Windows 10 without modification. At the same time, this book also introduces the basic knowledge of operating systems and assembly required for kernel security programming in a simple and easy-to-understand manner. _X005F_x000D_ This book is divided into three parts. The basic part covers the basic knowledge of driver development, reducing the difficulty of getting started. The development part introduces the technical implementation of various development needs that may be encountered in actual work, including: serial port filtering, keyboard filtering, disk virtualization, disk filtering, file system filtering and monitoring, file system transparent encryption, file system microfilter driver, network transport layer filtering, Win Windows filtering platform, NDIS protocol driver, NDIS small port driver, NDIS middle layer driver, IA-32 assembly basics, memory addresses in the IA-32 system, processor permission level switching, interrupts in the IA-32 architecture and Windows kernel hooks; the advanced chapter includes content related to assembly language, operating system principles, and processor architecture. This book is written by an engineer who has been engaged in this industry for a long time, so it is based on practicality. The attention to detail is mainly reflected in the solution of practical problems rather than the exhaustive degree of knowledge. _X005F_x000D_