File protection technology based on Windows system file altering event

The invention relates to a file protection technique based on Windows system file change events, namely a file change monitoring mechanism of an InforGuard with a Middleware based on the event trigger technique. The file protection technique based on Windows system file change events is characterized in that (1) protected files are backed up, (2) monitoring of file change events of a protected catalogue is initiated by invoking an API function of the Windows system, (3) in case of processing file change time, on detecting a file change event, the file is processed correspondingly according to file change types, and (4) dynamic file maintenance is carried out, namely common file maintenance operations are allowed while protecting the files through the file change events. The file protection technique based on Windows system file change events resolves the problems of real time and flexibility for file protection.