WDM Driver for Biometric Sensor

A company engaged OSR to perform a design and code review of the driver for their biometric sensor family of products. While this driver had been shipping in the field for one to two years, existing customers were experiencing issues with the driver. Client believed these issues were caused by the Selective Suspend and Power Management code in the driver, and thus have asked OSR to focus primarily on those code paths.

Result: OSR’s major finding was that there is a general lack of proper serialization throughout the driver, especially with regard to the Selective Suspend (SS) and Power Management (PM) paths. To the credit of the original developer, several of these issues existed in the DDK sample driver on which the client’s driver was based. In addition to the SS/PM race conditions there are several other places within the driver that were subject to race conditions. Notably these conditions exist in the interaction between the driver and the underlying bus driver. The code review also uncovered several issues in terms of general Windows Driver Model concepts, including the use of a sub-optimal I/O model.

"White Listing" Product

A company providing endpoint control and security solutions engaged OSR for a code review of a Windows security product to determine if approaches taken with the driver would lead to stability or compatibility issues, and if so, whether alternative approaches could be taken to overcome these issues.

Result: The particular driver reviewed relied heavily on unsupported hooking practices to monitor system call, file system, network, and keyboard activity, in order to achieve the functionality desired. In addition, other practices within the code base were determined to have dangerous security and reliability impact. A detailed summary document was provided to the client, with recommended alternative (more reliable and supportable) approaches to achieve the client's overall goal. Subsequently, client engaged OSR to design a new driver based on these findings, so that client’s in-house staff could then pick-up the project and take it through the implementation and deployment phase.

File System Filter (Adaptive Compression)

OSR was approached by a provider of adaptive compression technology to perform a code review of the kernel components (interface and file system filter) of an advanced caching solution.

Result: OSR was able to define issues with file naming (including aliasing such as short/long name, hard links and Open by file ID), significant issues in tracking file context, some minor PnP issues, and other less-critical programming issues such as memory leaks, use of untagged allocations, and 64-bit readiness. Suggestions and solutions were provided to the client to assist their engineering staff in remedying these issues.

FDE Hibernation/Crash Dump Support

A data security company had an existing full disk encryption (FDE) product for the Windows operating system comprising a real-mode component and a disk-class filter. Because hibernation and crash dump file contain exact snapshots of the user’s activity on the system, it was imperative for this security product to either (a) disable hibernation and crash dump facilities, or (b) encrypt the hibernation and crash dump files’ contents. As option (a) lead to a decrease in standard Windows functionality, the client asked OSR to research and come up with a design to appropriately handle Windows hibernation/crash dump support to ensure that data is written in encrypted form to disk during these two scenarios.

Result: OSR authored a design document describing a best-case approach for crash and hibernation file encryption.  On receipt of the design, the client was able to utilize the design and its own internal staff to implement the code necessary to deliver this functionality as part of its FDE solution.

NVRAM Disk Cache Device

A hardware company wanted to build a high performance NVRAM disk cache device for Windows. The company engaged OSR to define design alternatives, review them with the company's engineering staff, and from these alternatives create a high level design.

Result: OSR provided client with the details and pros/cons of five separate design alternatives for implementing its device on Windows. Each approach was compared, and recommendations were provided to client on proceeding. After a specific design approach was selected by the client, OSR authored a high level design document describing the approach (which included multiple kernel-mode drivers) for implementation by the client's staff.

Data Leak Prevention (DLP) Solution

A data leak prevention (DLP) provider engaged OSR to author a product “white paper” and design based on a secure operating environment for Windows comprised of authorization/authentication, storage management, configuration management, network management, and reporting/auditing facilities and components.

Result: Client’s solution was designed and delivered to protect the host computing environment from malicious code or attacks, including: code execution, Trojan installation, malware or antivirus; propagation of malicious code from the user to system environment; re-execution of malicious code on restart/logoff; deletion (by user) of system resources; code patching; and execution of programs from remote resources.

File System Filter for Magneto-Optical (MO) HSM Solution

A company had an existing product that managed magneto-optical (MO) disks via a UDF file systems implementation in Windows, and desired to add support for hierarchical storage management (HSM). OSR was engaged to design a solution using its existing file system implementation that would (a) improve perceived performance, decrease overhead, and improve interoperability with other standard Windows components.

Result: OSR designed a service (with responsibility of migrating data to and from the existing FS) and an NTFS-based file system filter to manage reparse points, data repatriation, and ancillary file system operations.

Transparent, Per-File Encryption Solution

A software security solution company approached OSR with a set of requirements for a custom, per-file encryption solution for Windows. OSR proposed the design and implementation of this solution, using its Data Modification Kit (DMK).

Result: The resulting solution was completed by OSR, remains a shipping product to this day, and is maintained by the client with support and upgrades to OSR's Data Modification Kit (DMK) portion of the solution.

"Blade" Server Solution

OSR worked with a company who had designed and delivered a “blade” solution on Linux, but had clients clamoring for their product on the  Windows OS. While various storage, network and processing components were part of the system, OSR’s focus was on designing and delivery the kernel piece related to the disk storage of the system.

Result: OSR designed and implemented a complex port driver to manage virtual storage devices attached to the blade system via a cross-bar switch.  Challenges included ensuring proper crash dump support, interoperability with other software in the system, plug and play support, and multipath IO.

File System for Industrial Control Solution

A company in the industrial automation and control industry approached OSR with the need to host the services provided by a proprietary file system on Windows.

Result: OSR designed and implemented a prototype of a custom file system on Windows using its File System Development Kit (FSDK). The FSDK, and the prototype, allowed the client to be insulated from many of the complexities of implementing an installable file system on Windows, so that they could focus on the features and functionality of the solution. The “pseudo file system" that was created appeared as a local file system to the Windows client, to allow exporting of the file system via the SMB file server (SRV) so that other SMB clients could access files.

USB Device Enumeration Solution

A storage company required assistance in solving a specific USB device enumeration issue to help streamline its automated test suite.

Result: Client engaged OSR to research various methods to enumerate devices on the USB bus, evaluate pros/cons, determine applicability/feasibility, and then implement both a software prototype (for “proof of concept”) and final, customer-ready solution. This work was completed as expected, and within a tight customer timeline.

Notebook Disk Drive Protection

A PC manufacturer approached OSR with the requirement to work with their platform hardware and firmware architects, to design and implement a solution that would protect notebook disk drives from damage during inadvertent drops by a user.

Result:  Working with a wide variety of groups (product management, platform architects, BIOS engineers, and others) OSR collaborated on an architecture, and then designed and delivered a solution for the client. This entailed working through issues with various models and stages of prototype devices, in various disk configurations, and on various versions of the Windows OS.  OSR maintained its “presence” on the project for additional years, by providing maintenance and support while the product line gained popularity in the consumer market.

File System Filter (per-file replication)

A PC manufacturer, services, and solutions company approached OSR with the need to implement a file system interface on Windows for data distribution (per-file replication) on drives for a point of sale (POS) solution.

Result: This solution was designed and implemented, and to this day, maintains a large and successful presence in the parcel/package shipping industry.

File System Filter (per-file replication)

A company engaged OSR to explore some issues in its core network redundancy solution. As part of those explorations, architecture for a new product that provided real-time data replication arose, with OSR offering to design and implement it.  The client hired OSR to complete the design and implemenation.

Result:  The completed solution operated on the primary system, intercepting I/O operations (FS filter) and replaying them on a corresponding file maintained on a secondary, remote, system. This solution -- the first of its kind in the industry -- was a major commercial success for the client, and for at least one other vendor that licensed the core technology from the client and rebranded it as its own.

WDM Drivers (custom PCI devices)

A large supplier of products and solutions to the direct mail industry engaged with OSR to write drivers for two proprietary interface devices used as part of an automated mail processing system.

Result: OSR developed and tested each driver against a simulation device (the automated system was quite large and thus not portable), and delivered the completed driver and associated user-mode console apps, along with a warranty to cover any issues uncovered with testing of the actual processing system.

Consumer Infrared Receiver (CIR) Device Port Driver

OSR worked with a major software vendor to provide Windows Media Center support for a Consumer Infrared Receiver (CIR) device.

Result: Working with the client, a 3rd party semi-conductor company, and a 3rd party BIOS provider, OSR designed and delivered the first of its kind IR port driver to support the CIR device on Windows. In addition, OSR authored test tools and documentation to be used as part of CIR device/IR port driver quality tests on the Windows platform.