473,466 Members | 1,326 Online
Bytes | Software Development & Data Engineering Community
Create Post

Home Posts Topics Members FAQ

IL Security

It seems that C#.Net is not especially secure. What I mean is that if
I were to write an application in C# and then try to sell this
application, someone else could just come along and decompile it and
steal my code. Am I missing something here or is this the way that
the .Net framework actually is? Is there no solution to this?

-E

May 9 '07 #1
5 1308
This is what the framework actually is. What you want to do is
obfuscate your code. If you do a search on google for ".NET obfuscate" you
will turn up a number of products that will help you.

Hope this helps.

--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard.caspershouse.com

<ew******@gmail.comwrote in message
news:11**********************@l77g2000hsb.googlegr oups.com...
It seems that C#.Net is not especially secure. What I mean is that if
I were to write an application in C# and then try to sell this
application, someone else could just come along and decompile it and
steal my code. Am I missing something here or is this the way that
the .Net framework actually is? Is there no solution to this?

-E

May 9 '07 #2
On Wed, 09 May 2007 13:13:47 -0700, <ew******@gmail.comwrote:
It seems that C#.Net is not especially secure. What I mean is that if
I were to write an application in C# and then try to sell this
application, someone else could just come along and decompile it and
steal my code. Am I missing something here or is this the way that
the .Net framework actually is? Is there no solution to this?
There's obuscation tools that make it harder to do what you're talking
about. However, even with them, if someone wants to reverse engineer your
code, they can. More importantly, even if you compile your code straight
to machine code, it is not secure. It may take a little more work, but it
is possible to reverse compiled machine code and there are even tools
available to help someone do that. Even with optimizations, one can
reverse the process of compilation and get back to something reasonably
usable.

Basically, if you write software and you let anyone else use it, then
anyone using it has the ability to get back to your original algorithms
and design. It may be slightly easier with .NET applications, but no
software is immune and it really just comes down to how valuable your code
is. If your code is particularly useful, no amount of protection will
prevent it from eventually being reverse engineered. Conversely, if your
code isn't unique or difficult to reproduce, you could publish the
original source code and still not have to worry too much about other
people using it.

In other words, whether your code gets reused (whether with your
permission or not) has more to do with how useful the code is than whether
you've obfuscated it somehow.

Pete
May 9 '07 #3
<ew******@gmail.comwrote:
It seems that C#.Net is not especially secure.
Security and intellectual property protection (for programs) are
usually deemed to be somewhat different beasts in computing. Reading
your first couple of lines, I thought you meant there were lots of
security holes within the .NET framework for crackers to attack.
What I mean is that if
I were to write an application in C# and then try to sell this
application, someone else could just come along and decompile it and
steal my code. Am I missing something here or is this the way that
the .Net framework actually is? Is there no solution to this?
See http://pobox.com/~skeet/csharp/obfuscation.html for my views on the
matter.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet Blog: http://www.msmvps.com/jon.skeet
If replying to the group, please do not mail me too
May 9 '07 #4
Would code be safer for a WebApp?
I mean, the code would run on only 1 machine,
instead of being distributed to the public.
Roger
May 9 '07 #5
Thank you all for the excellent responses. I did, indeed, mean
Intellectual Property Protection rather than 'security.' I was not
aware of the distinction between the two but this does make sense to
me now that it has been pointed out. Does anyone have any experience
with a product called "Salamander?" It supposedly strips away the need
for the framework. I am not sure how this is done, precisely, and I
also don't understand why MS did not build this sort of functionality
(or obfuscation) into the .NET framework to begin with.

-E

May 10 '07 #6

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
by: robert | last post by:
well, talk about timely. i'm tasked to implement a security feature, and would rather do so in the database than the application code. the application is generally Oracle, but sometimes DB2. ...
116
by: Mike MacSween | last post by:
S**t for brains strikes again! Why did I do that? When I met the clients and at some point they vaguely asked whether eventually would it be possible to have some people who could read the data...
4
by: Ashish | last post by:
Hi Guys I am getting the following error while implementing authentication using WS-security. "Microsoft.Web.Services2.Security.SecurityFault: The security token could not be authenticated...
0
by: prithvi g via .NET 247 | last post by:
Hi I am a newbie to .NET remoting, I am trying to implementauthorization using SSPI example provided by Michael Barnett. Ihave included the required dll(Microsoft.Samples.Security.SSPI.dll...
1
by: Earl Teigrob | last post by:
Background: When I create a ASP.NET control (User or custom), it often requires security to be set for certain functionality with the control. For example, a news release user control that is...
7
by: Magdelin | last post by:
Hi, My security team thinks allowing communication between the two IIS instances leads to severe security risks. Basically, we want to put our presentation tier on the perimeter network and the...
0
by: Jay C. | last post by:
Jay 3 Jan. 11:38 Optionen anzeigen Newsgroups: microsoft.public.dotnet.framework.webservices.enhancements Von: "Jay" <p.brunm...@nusurf.at> - Nachrichten dieses Autors suchen Datum: 3 Jan...
3
by: Velvet | last post by:
I ran FxCop on one of the components for my web site and the security rules what me to add " tags like the ones listed below: This breaks my ASP.NET application. So my question is,...
1
by: Jeremy S. | last post by:
..NET's code Access Security enables administrators to restrict the types of things that a .NET application can do on a local computer. For example, a ..NET Windows Forms application can be...
2
by: Budhi Saputra Prasetya | last post by:
Hi, I managed to create a Windows Form Control and put it on my ASP .NET page. I have done the suggestion that is provided by modifying the security settings. From the stack trace, I would...
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
0
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
1
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...
0
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...
0
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...
0
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The...
0
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
0
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated ...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.