Re: How are you protecting your .net applications?
Dotfuscator, yes. And there are some (ironically) commercial solutions to protect your applications out there.
But from what I know of Reflection, if someone is really really determined, your .NET isn't completely safe. One way I've heard of is to actually write the most "important" part of the code in C++, compile as a DLL, and use Interop to use it in your .net app! I don't like that approach, but hey, to each his own right?
Microsoft has a list of tools here for protecting apps, and it seems to be Obfuscators all the way. Their algos might vary, I suppose.
Re: How are you protecting your .net applications?
Hows that Thing Work, It Seems to Search for xml or Some type of file eXTENSION? I Thought You could Just Find the .exe and come back after Coffee and Surprize!
Re: How are you protecting your .net applications?
As a side note Obfuscation can jack some reflections situations. I don't mean someone else trying to reflect or reverse your code I mean your code using reflection to evaluate things at runtime. Since the Obfuscation changes the type names and types and things of that nature then I wouldn't recommend any heavy reflection in the code it seems to get confused.
Re: How are you protecting your .net applications?
First you need a license agreement that makes it clear that reverse engineering is not permitted. That way anyone doing so knows that they are breaking the rules.
Next look at obfiscation of the code that handles licensing and and really clever proprietry algorithms but don't bother obfiscating the whole application.
Re: How are you protecting your .net applications?
Obfuscation is a very weak way of protection your .net application imho. Even though the names are now scewed the source is still visible with a IL Object browser.. Sure some may throw in some goofy code to throw off people but you can still pull the code right out of your .net exe's..
Anyone do any research on thinstall or remotesoft?
Re: How are you protecting your .net applications?
I would suggest reverse engineering an application and see how easy or hard it is. Then obfuscate it and try again and see if that is more effort than you think someone else will put into it. Then think of what it would be like for a larger application.
There really isn't much if anything that will fully protect you, so you are basically just trying to make it harder to do.
Re: How are you protecting your .net applications?
Obfuscators claim more protection than they can delivery..
for one, string encryption.. Sure you can't read the strings directly with your .net Object Browser but you can view the string decription function so all you have to do is pass the encrypted strings through this function and poof, there goes your "string encryption".
I believe obfuscation will only thwart those that do not know how to reverse engineer applications. It can be confusing to look at but you still have all functions in plain sight. Hard to protect algorithms when competitors can simply pull them out of your exe.
Reply With Quote
Originally Posted by mendhak
