471,350 Members | 1,946 Online
Bytes | Software Development & Data Engineering Community
Post +

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 471,350 software developers and data experts.

Securing a .NET application

Hi, what steps do i need to take to make our application as secure as
possible? At some point over the coming months it will be released to
the public and we want to make sure that our competitors cant get access
to our source code.

I know about creating strong key names, but that doesnt stop the IL code
being read. Obfuscation (sp?!) as i briefly understand can help to make
the IL unreadable for anyone who attempts it. But what else can be done?
And what obfuscation tools do you use?

Thanks,

Mark
Jan 31 '06 #1
3 1227
Dotfuscator is the only one I've tried (as it comes with vs.net) but
seems to do the job. Are you storing passwords inside the source code?
Obfuscation is really the only protection you have against source code
theft with an interpreted byte-code language as far as I know. A native
image via NGEN may be one other option.

Jan 31 '06 #2
Chris S. wrote:
Dotfuscator is the only one I've tried (as it comes with vs.net) but
seems to do the job. Are you storing passwords inside the source code?
Obfuscation is really the only protection you have against source code
theft with an interpreted byte-code language as far as I know. A native
image via NGEN may be one other option.


hmm, yeah, i guess we could precompile the .exe for the windows
platform. that would add an extra layer of protection wouldnt it?
Jan 31 '06 #3

"Mark Ingram" <no****@nowhere.com> wrote in message
news:%2****************@TK2MSFTNGP15.phx.gbl...
| Chris S. wrote:
| > Dotfuscator is the only one I've tried (as it comes with vs.net) but
| > seems to do the job. Are you storing passwords inside the source code?
| > Obfuscation is really the only protection you have against source code
| > theft with an interpreted byte-code language as far as I know. A native
| > image via NGEN may be one other option.
| >
|
| hmm, yeah, i guess we could precompile the .exe for the windows
| platform. that would add an extra layer of protection wouldnt it?

No it won't:
1. you have to ngen on the target platform,
2. you still need the original assembly, you can't run ngen'd images without
it.

Willy.


Jan 31 '06 #4

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

17 posts views Thread by David McNab | last post: by
11 posts views Thread by Susan Bricker | last post: by
11 posts views Thread by Wm. Scott Miller | last post: by
1 post views Thread by ven | last post: by
4 posts views Thread by =?Utf-8?B?aGlsZXlq?= | last post: by
reply views Thread by XIAOLAOHU | last post: by

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.