473,791 Members | 2,973 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

How to secure my DLLs

Hi All

I am developing a web application in .Net technology. Usually, I create a
DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to secure
component design. Give me some professional techniques to secure the codes.
Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly
Jul 21 '05 #1
5 2371
You can obfuscate your assemblies so they cannot be easily decompiled.
Visual Studio 2003 has a basic built in obfuscator, but for 2002 you'll need
a 3rd party solution.

Here's more information on obfuscators:
http://www.abderaware.com/WhitePapers/Obfuscator.htm
http://www.preemptive.com/dotfuscator/index.html
http://www.devx.com/SummitDays/Article/11351
http://www.lesser-software.com/ilobf.htm

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com

"Kelly G." <no*@moreply.co m> wrote in message
news:Os******** ********@TK2MSF TNGP10.phx.gbl. ..
Hi All

I am developing a web application in .Net technology. Usually, I create a
DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to secure component design. Give me some professional techniques to secure the codes. Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly

Jul 21 '05 #2
Kelly,

using intermediate code is has a great many advantages and the clr should be
able to read the intermediate code as is.
For that reason if you need to hide your business logic you can use tools
like Dotfuscator www.preemptive.com
using such tools dont make it impossible to decompile... just a bit harder.
In my experience
1. you can fudge the control flow to an extent
2. you can use string encryption
3. you can use renaming (i prefer renaming to unprintable characters)

once you fudge your assembly.
..NET Reflector: http://aisto.com/roeder/dotnet/
MSIL Disassembler:
http://msdn.microsoft.com/library/de...deployment.asp

download them and loaded up your dotfuscatored assembly and see what the
output is like. then you can keep trying various aspects of dotfuscator and
see how they work.

HTH

--
Regards,

HD

"Kelly G." <no*@moreply.co m> wrote in message
news:Os******** ********@TK2MSF TNGP10.phx.gbl. ..
Hi All

I am developing a web application in .Net technology. Usually, I create a
DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to secure component design. Give me some professional techniques to secure the codes. Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly

Jul 21 '05 #3
Hi Steve

Thanks a lot for the immediate response.
Will get back to you in case of any further clarifications.
Warm Wishes
Kelly
"Steve C. Orr [MVP, MCSD]" <St***@Orr.ne t> wrote in message
news:%2******** ********@TK2MSF TNGP10.phx.gbl. ..
You can obfuscate your assemblies so they cannot be easily decompiled.
Visual Studio 2003 has a basic built in obfuscator, but for 2002 you'll need a 3rd party solution.

Here's more information on obfuscators:
http://www.abderaware.com/WhitePapers/Obfuscator.htm
http://www.preemptive.com/dotfuscator/index.html
http://www.devx.com/SummitDays/Article/11351
http://www.lesser-software.com/ilobf.htm

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com

"Kelly G." <no*@moreply.co m> wrote in message
news:Os******** ********@TK2MSF TNGP10.phx.gbl. ..
Hi All

I am developing a web application in .Net technology. Usually, I create a DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to

secure
component design. Give me some professional techniques to secure the

codes.
Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly


Jul 21 '05 #4
Hi Steve
I am back again!
I got lots of doubts now.

1.) Is that possible to create a one dll includes
controls/library/assemblies?

2.) If yes, you mean I don't need aspx anymore to run over the
web, just if I call dll will load the whole page.

3.) If no, can I have valid reason?

Explanation:

Let say, I want to run a site only with dlls but not with
aspx. It is a single DLL concept. There is any possibility to do so.

Awaiting..

Thanks and Regards

Kelly

"Steve C. Orr [MVP, MCSD]" <St***@Orr.ne t> wrote in message
news:%2******** ********@TK2MSF TNGP10.phx.gbl. ..
You can obfuscate your assemblies so they cannot be easily decompiled.
Visual Studio 2003 has a basic built in obfuscator, but for 2002 you'll need a 3rd party solution.

Here's more information on obfuscators:
http://www.abderaware.com/WhitePapers/Obfuscator.htm
http://www.preemptive.com/dotfuscator/index.html
http://www.devx.com/SummitDays/Article/11351
http://www.lesser-software.com/ilobf.htm

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com

"Kelly G." <no*@moreply.co m> wrote in message
news:Os******** ********@TK2MSF TNGP10.phx.gbl. ..
Hi All

I am developing a web application in .Net technology. Usually, I create a DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to

secure
component design. Give me some professional techniques to secure the

codes.
Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly


Jul 21 '05 #5
No you can't easily do this. You'd have to structure your assemblies very
carefully during development.

For now you still need ASPX pages.
It .NET 2.0 this kind of thing gets much more flexible.

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com


"Kelly G." <no*@moreply.co m> wrote in message
news:eP******** ******@TK2MSFTN GP11.phx.gbl...
Hi Steve
I am back again!
I got lots of doubts now.

1.) Is that possible to create a one dll includes
controls/library/assemblies?

2.) If yes, you mean I don't need aspx anymore to run over the web, just if I call dll will load the whole page.

3.) If no, can I have valid reason?

Explanation:

Let say, I want to run a site only with dlls but not with
aspx. It is a single DLL concept. There is any possibility to do so.

Awaiting..

Thanks and Regards

Kelly

"Steve C. Orr [MVP, MCSD]" <St***@Orr.ne t> wrote in message
news:%2******** ********@TK2MSF TNGP10.phx.gbl. ..
You can obfuscate your assemblies so they cannot be easily decompiled.
Visual Studio 2003 has a basic built in obfuscator, but for 2002 you'll need
a 3rd party solution.

Here's more information on obfuscators:
http://www.abderaware.com/WhitePapers/Obfuscator.htm
http://www.preemptive.com/dotfuscator/index.html
http://www.devx.com/SummitDays/Article/11351
http://www.lesser-software.com/ilobf.htm

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com

"Kelly G." <no*@moreply.co m> wrote in message
news:Os******** ********@TK2MSF TNGP10.phx.gbl. ..
Hi All

I am developing a web application in .Net technology. Usually, I
create a DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to

secure
component design. Give me some professional techniques to secure the

codes.
Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly



Jul 21 '05 #6

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
1983
by: SQL Sever News Group | last post by:
Hi, I v a problem that i have to secure my asp code. I tried "screnc.exe", it is very useful but not hard to crack. Anybody who can give an alternate and better way. Thanks in Advance
3
1935
by: Shannon Clyde | last post by:
SMTP + relay + auth in an IPSEC tunnel to connect to our primary SMTP mail server (GroupWise) from the Web server looks like it would work fine, but is it the best way? I am aware of CDOSYS and some commercial DLLs that allow devs to send mail from within .ASP and .NET without local SMTP service running. Is there any OTHER way to connect to an external SMTP server for mail delivery from a .NET application?
1
1602
by: Melissa | last post by:
I have two DLLs that utilize the MFC classes for doing normal FTP communications for uploading files. Well, someone has requested that we use secure FTP protocol. I have been looking on the internet for some libraries, but most are for purchase. Would someone provide suggestions on what they consider to be most useful or are their libraries available that are not for cost (I am sure that is a pipe-dream.)? Any information would be...
4
2594
by: Chuck Anderson | last post by:
I use apache, Php and MySql on my Windows XP machine at home. I have been doing so successfully now for a long time. However, I am now trying to use fopen to open secure URLs (https) and having no luck. I have installed openssl and enabled the extension (phpinfo says so, too). But still it does not work. I now realize that I need to have https and ftps as registered streams, i.e., Registered PHP Streams php, http, ftp, https,...
2
2864
by: Johann Blake | last post by:
I can hardly believe I'm the first one to report this, but having gone through the newsgroup, it appears that way. I would like to open a solution in the VS.NET IDE that consists of multiple DLLs and a test application (an .EXE). The .EXE is my startup application. All the DLLs are shared components. This means that they contain a key and are stored in the GAC. When I go to run the test application in the IDE, it will not execute...
7
3025
by: Seth | last post by:
I have noticed that the id of my session object changes when I switch from a non-secure to a secure connection. What I'm trying to do: I have a cookie that is built on the non-secure side of things. What I need to do is to switch to a secure connection and then later on while still in that secure connection delete the cookie that was created on the non- secure side. I need to do this because I can not reference the non-secure cookie...
0
3230
by: ZMan | last post by:
Scenario: This is about debugging server side scripts that make calls to middle-tier business DLLs. The server side scripts are legacy ASP 3.0 pages, and the DLLs are managed DLLs converted/developed with VB.NET. What I want from debugging is to be able to step into the methods in the DLLs called from ASP scripts using Visual Studio .NET. Background: For typical script debugging issues, you can read and follow the two documents on...
5
375
by: Kelly G. | last post by:
Hi All I am developing a web application in .Net technology. Usually, I create a DLL for all of my modules to protect the logics. And it is possible to decompile the DLL. How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to secure component design. Give me some professional techniques to secure the codes. Any 3rd party software must not be able to decompile it.
5
1700
by: =?Utf-8?B?TWljaGVsQFZvb3JidXJn?= | last post by:
Hi all, i've built a C# dll / component with some wonderful services to the clients Payroll service. As you might guess, i only want MY pogram to use this DLL. If some developer get's hold of a reference to my dll, he or she could easily use all methods to raise his or hers salary.... I tried code access security, bu i can only use that on Class level and not on Assembly level, and i've read that there are ways to work around this kind
0
9669
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
10427
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10207
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
10155
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
9995
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
9029
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
6776
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
1
4110
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
3
2916
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.