pramod_kumar_tk
asked on
Device Drives ?
Hi Experts,
What is this Device Drives ? How can create a device driver ? in VC++
Is this device drives handle only hardwares ? can we create a device drive
which will check for the instance of a particular process and denie it access ?
i.e It will check for the instance of a particular programme c:\a.exe, it any one start it the this device driver should show some message like 'Access denied" and close the program.
how can load this driver on windows start up.
What is this Device Drives ? How can create a device driver ? in VC++
Is this device drives handle only hardwares ? can we create a device drive
which will check for the instance of a particular process and denie it access ?
i.e It will check for the instance of a particular programme c:\a.exe, it any one start it the this device driver should show some message like 'Access denied" and close the program.
how can load this driver on windows start up.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
jhance,
As I told him, it can be done, actually it's not that uncommon, but it's far more complicated than using a hook or a service.
I worked at a company that create securty software for personal computer (http://www.scua.net/english/index.htm), the software was used to grant or deny access to some Windows functions, including, running application, and that was done by a device driver, which was installed in the file system.
Some device drivers are used just as passthrough, they don't interact with hardware, they just sit there, reading the data that are sent to or from a device and sometimes they block that information or process it in another way.
Wenderson
As I told him, it can be done, actually it's not that uncommon, but it's far more complicated than using a hook or a service.
I worked at a company that create securty software for personal computer (http://www.scua.net/english/index.htm), the software was used to grant or deny access to some Windows functions, including, running application, and that was done by a device driver, which was installed in the file system.
Some device drivers are used just as passthrough, they don't interact with hardware, they just sit there, reading the data that are sent to or from a device and sometimes they block that information or process it in another way.
Wenderson
Since we're clarifying here....
NORMALLY a device driver is used with a real or virtual device so that Windows or an application can
interact with the hardware.
What you've described, watching for an instance of a particular program and denying access, IS NOT REALLY
a job for a device driver. While I suppose such a thing COULD BE DONE in one, it's NOT THE BEST approach
and would certainly be much more difficult.
My advice would be to write a SERVICE that hooked the CreateProcess API. But a detailed answer on this
is worth far more than 50 pts.
NORMALLY a device driver is used with a real or virtual device so that Windows or an application can
interact with the hardware.
What you've described, watching for an instance of a particular program and denying access, IS NOT REALLY
a job for a device driver. While I suppose such a thing COULD BE DONE in one, it's NOT THE BEST approach
and would certainly be much more difficult.
My advice would be to write a SERVICE that hooked the CreateProcess API. But a detailed answer on this
is worth far more than 50 pts.
pramod,
my comments on device driver more related to embedded sytems . i did not worked anything on VC.
let me explain in detail of device driver.
assume a device say some transceiver connected to u r mother board. u want to send a frame to the transciver from ur processor . The art of achiving the io interaction in making the device ( tranceiver) to act is called device driver .
to write adevice driver
1. first u should initialise the peripheral chip here in my ex tranciver .
2. how ur going to transfer the data DMA mode or ordinary Read and write actions.
so u need to initalise the on chip peripherals.
3. then send data and recive it. ( most complicated process)
if u need to know much on drivers i feel long way to explain.
i can tell u in and out of device drivers in embedded systems. if u rintrested .
written lot of drivers..;)
i do agree jhance and wanderson comments
my comments on device driver more related to embedded sytems . i did not worked anything on VC.
let me explain in detail of device driver.
assume a device say some transceiver connected to u r mother board. u want to send a frame to the transciver from ur processor . The art of achiving the io interaction in making the device ( tranceiver) to act is called device driver .
to write adevice driver
1. first u should initialise the peripheral chip here in my ex tranciver .
2. how ur going to transfer the data DMA mode or ordinary Read and write actions.
so u need to initalise the on chip peripherals.
3. then send data and recive it. ( most complicated process)
if u need to know much on drivers i feel long way to explain.
i can tell u in and out of device drivers in embedded systems. if u rintrested .
written lot of drivers..;)
i do agree jhance and wanderson comments
This question is dificult. But i do an overview.
What is this Device Drives ?
it already was explain(comment prior).
How can create a device driver ?
it usually creat with Windows - DDK, but it is difficult, because it is to done in Assembler,
In VC++ use "NUMEGA"(Vtoolsd) of the Compuware, then this stay more easy:))
in VC++ Is this device drives handle only hardwares ?
No, it can to be used with kernel windows. ( ring 0)
"
can we create a device drive which will check for the instance of a particular process and denie it access ?
i.e It will check for the instance of a particular programme c:\a.exe, it any one start it the this
device driver should show some message like 'Access denied" and close the program.
how can load this driver on windows start up.
"
In software "SOFTICE" of the NUMEGA Compuware, you can to check this.
For load this driver, put in System.ini, in section [386] the line with the name of the drive.
Example:
[386]
device=mydriver.vxd
What is this Device Drives ?
it already was explain(comment prior).
How can create a device driver ?
it usually creat with Windows - DDK, but it is difficult, because it is to done in Assembler,
In VC++ use "NUMEGA"(Vtoolsd) of the Compuware, then this stay more easy:))
in VC++ Is this device drives handle only hardwares ?
No, it can to be used with kernel windows. ( ring 0)
"
can we create a device drive which will check for the instance of a particular process and denie it access ?
i.e It will check for the instance of a particular programme c:\a.exe, it any one start it the this
device driver should show some message like 'Access denied" and close the program.
how can load this driver on windows start up.
"
In software "SOFTICE" of the NUMEGA Compuware, you can to check this.
For load this driver, put in System.ini, in section [386] the line with the name of the drive.
Example:
[386]
device=mydriver.vxd
feel free to reject !!!
so that u can get lot of inputs from experts.
alex brasil here evryone is trying to share knowledge it is not for points...
so that u can get lot of inputs from experts.
alex brasil here evryone is trying to share knowledge it is not for points...
ASKER
Hi all
Sorry for late comment
Then it is not simple task to make a driver file, ok
Then plz help me How to denie a particular process
i.e It will check for the instance of a particular programme c:\a.exe, it any one start it the this
device driver should show some message like 'Access denied" and close the program.
Sorry for late comment
Then it is not simple task to make a driver file, ok
Then plz help me How to denie a particular process
i.e It will check for the instance of a particular programme c:\a.exe, it any one start it the this
device driver should show some message like 'Access denied" and close the program.
Dear pramod_kumar_tk
I think you forgot this question. I will ask Community Support to close it unless you finalize it within 7 days. You can always request to keep this question open. But remember, experts can only help you if you provide feedback to their questions.
Unless there is objection or further activity, I will suggest to accept
"wenderson"
comment(s) as an answer.
If you think your question was not answered at all, you can post a request in Community support (please include this link) to refund your points. The link to the Community Support area is: https://www.experts-exchange.com/commspt/
PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER!
======
Werner
I think you forgot this question. I will ask Community Support to close it unless you finalize it within 7 days. You can always request to keep this question open. But remember, experts can only help you if you provide feedback to their questions.
Unless there is objection or further activity, I will suggest to accept
"wenderson"
comment(s) as an answer.
If you think your question was not answered at all, you can post a request in Community support (please include this link) to refund your points. The link to the Community Support area is: https://www.experts-exchange.com/commspt/
PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER!
======
Werner
Force accepted
** Mindphaser - Community Support Moderator **
** Mindphaser - Community Support Moderator **
What you've described, watching for an instance of a particular program and denying access, is not really a job for a device driver. While I suppose such a thing could be done in one, it's not the best approach and would certainly be much more difficult.
My advice would be to write a SERVICE that hooked the CreateProcess API. But a detailed answer on this is worth far more than 50 pts.