I know many people are working for file system filter under
Win98/2k/xp for access control.Usually it involves a IFS hook,a data
encryption,and some applications.But i have a problem for years,let’s
imagine it: when a fileopen operation occured,your hook catch the
request,check the condition and finally send data to application.But if another hook(spy hook) installed after you hook,and record the data
your hook send out.now, although you have access control,the
confidance is revealed.
Is there any way to avoid it?I don’t know,I want to know.