473,804 Members | 3,324 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

How to secure my DLLs

Hi All

I am developing a web application in .Net technology. Usually, I create a
DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to secure
component design. Give me some professional techniques to secure the codes.
Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly
Jul 21 '05 #1
5 2372
You can obfuscate your assemblies so they cannot be easily decompiled.
Visual Studio 2003 has a basic built in obfuscator, but for 2002 you'll need
a 3rd party solution.

Here's more information on obfuscators:
http://www.abderaware.com/WhitePapers/Obfuscator.htm
http://www.preemptive.com/dotfuscator/index.html
http://www.devx.com/SummitDays/Article/11351
http://www.lesser-software.com/ilobf.htm

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com

"Kelly G." <no*@moreply.co m> wrote in message
news:Os******** ********@TK2MSF TNGP10.phx.gbl. ..
Hi All

I am developing a web application in .Net technology. Usually, I create a
DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to secure component design. Give me some professional techniques to secure the codes. Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly

Jul 21 '05 #2
Kelly,

using intermediate code is has a great many advantages and the clr should be
able to read the intermediate code as is.
For that reason if you need to hide your business logic you can use tools
like Dotfuscator www.preemptive.com
using such tools dont make it impossible to decompile... just a bit harder.
In my experience
1. you can fudge the control flow to an extent
2. you can use string encryption
3. you can use renaming (i prefer renaming to unprintable characters)

once you fudge your assembly.
..NET Reflector: http://aisto.com/roeder/dotnet/
MSIL Disassembler:
http://msdn.microsoft.com/library/de...deployment.asp

download them and loaded up your dotfuscatored assembly and see what the
output is like. then you can keep trying various aspects of dotfuscator and
see how they work.

HTH

--
Regards,

HD

"Kelly G." <no*@moreply.co m> wrote in message
news:Os******** ********@TK2MSF TNGP10.phx.gbl. ..
Hi All

I am developing a web application in .Net technology. Usually, I create a
DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to secure component design. Give me some professional techniques to secure the codes. Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly

Jul 21 '05 #3
Hi Steve

Thanks a lot for the immediate response.
Will get back to you in case of any further clarifications.
Warm Wishes
Kelly
"Steve C. Orr [MVP, MCSD]" <St***@Orr.ne t> wrote in message
news:%2******** ********@TK2MSF TNGP10.phx.gbl. ..
You can obfuscate your assemblies so they cannot be easily decompiled.
Visual Studio 2003 has a basic built in obfuscator, but for 2002 you'll need a 3rd party solution.

Here's more information on obfuscators:
http://www.abderaware.com/WhitePapers/Obfuscator.htm
http://www.preemptive.com/dotfuscator/index.html
http://www.devx.com/SummitDays/Article/11351
http://www.lesser-software.com/ilobf.htm

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com

"Kelly G." <no*@moreply.co m> wrote in message
news:Os******** ********@TK2MSF TNGP10.phx.gbl. ..
Hi All

I am developing a web application in .Net technology. Usually, I create a DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to

secure
component design. Give me some professional techniques to secure the

codes.
Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly


Jul 21 '05 #4
Hi Steve
I am back again!
I got lots of doubts now.

1.) Is that possible to create a one dll includes
controls/library/assemblies?

2.) If yes, you mean I don't need aspx anymore to run over the
web, just if I call dll will load the whole page.

3.) If no, can I have valid reason?

Explanation:

Let say, I want to run a site only with dlls but not with
aspx. It is a single DLL concept. There is any possibility to do so.

Awaiting..

Thanks and Regards

Kelly

"Steve C. Orr [MVP, MCSD]" <St***@Orr.ne t> wrote in message
news:%2******** ********@TK2MSF TNGP10.phx.gbl. ..
You can obfuscate your assemblies so they cannot be easily decompiled.
Visual Studio 2003 has a basic built in obfuscator, but for 2002 you'll need a 3rd party solution.

Here's more information on obfuscators:
http://www.abderaware.com/WhitePapers/Obfuscator.htm
http://www.preemptive.com/dotfuscator/index.html
http://www.devx.com/SummitDays/Article/11351
http://www.lesser-software.com/ilobf.htm

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com

"Kelly G." <no*@moreply.co m> wrote in message
news:Os******** ********@TK2MSF TNGP10.phx.gbl. ..
Hi All

I am developing a web application in .Net technology. Usually, I create a DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to

secure
component design. Give me some professional techniques to secure the

codes.
Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly


Jul 21 '05 #5
No you can't easily do this. You'd have to structure your assemblies very
carefully during development.

For now you still need ASPX pages.
It .NET 2.0 this kind of thing gets much more flexible.

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com


"Kelly G." <no*@moreply.co m> wrote in message
news:eP******** ******@TK2MSFTN GP11.phx.gbl...
Hi Steve
I am back again!
I got lots of doubts now.

1.) Is that possible to create a one dll includes
controls/library/assemblies?

2.) If yes, you mean I don't need aspx anymore to run over the web, just if I call dll will load the whole page.

3.) If no, can I have valid reason?

Explanation:

Let say, I want to run a site only with dlls but not with
aspx. It is a single DLL concept. There is any possibility to do so.

Awaiting..

Thanks and Regards

Kelly

"Steve C. Orr [MVP, MCSD]" <St***@Orr.ne t> wrote in message
news:%2******** ********@TK2MSF TNGP10.phx.gbl. ..
You can obfuscate your assemblies so they cannot be easily decompiled.
Visual Studio 2003 has a basic built in obfuscator, but for 2002 you'll need
a 3rd party solution.

Here's more information on obfuscators:
http://www.abderaware.com/WhitePapers/Obfuscator.htm
http://www.preemptive.com/dotfuscator/index.html
http://www.devx.com/SummitDays/Article/11351
http://www.lesser-software.com/ilobf.htm

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com

"Kelly G." <no*@moreply.co m> wrote in message
news:Os******** ********@TK2MSF TNGP10.phx.gbl. ..
Hi All

I am developing a web application in .Net technology. Usually, I
create a DLL for all of my modules to protect the logics. And it is possible to
decompile the DLL.
How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to

secure
component design. Give me some professional techniques to secure the

codes.
Any 3rd party software must not be able to decompile it.
It is an essential part of my programming stuff. Please give solution.

Thanks and Regards

Kelly



Jul 21 '05 #6

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
1984
by: SQL Sever News Group | last post by:
Hi, I v a problem that i have to secure my asp code. I tried "screnc.exe", it is very useful but not hard to crack. Anybody who can give an alternate and better way. Thanks in Advance
3
1935
by: Shannon Clyde | last post by:
SMTP + relay + auth in an IPSEC tunnel to connect to our primary SMTP mail server (GroupWise) from the Web server looks like it would work fine, but is it the best way? I am aware of CDOSYS and some commercial DLLs that allow devs to send mail from within .ASP and .NET without local SMTP service running. Is there any OTHER way to connect to an external SMTP server for mail delivery from a .NET application?
1
1602
by: Melissa | last post by:
I have two DLLs that utilize the MFC classes for doing normal FTP communications for uploading files. Well, someone has requested that we use secure FTP protocol. I have been looking on the internet for some libraries, but most are for purchase. Would someone provide suggestions on what they consider to be most useful or are their libraries available that are not for cost (I am sure that is a pipe-dream.)? Any information would be...
4
2595
by: Chuck Anderson | last post by:
I use apache, Php and MySql on my Windows XP machine at home. I have been doing so successfully now for a long time. However, I am now trying to use fopen to open secure URLs (https) and having no luck. I have installed openssl and enabled the extension (phpinfo says so, too). But still it does not work. I now realize that I need to have https and ftps as registered streams, i.e., Registered PHP Streams php, http, ftp, https,...
2
2865
by: Johann Blake | last post by:
I can hardly believe I'm the first one to report this, but having gone through the newsgroup, it appears that way. I would like to open a solution in the VS.NET IDE that consists of multiple DLLs and a test application (an .EXE). The .EXE is my startup application. All the DLLs are shared components. This means that they contain a key and are stored in the GAC. When I go to run the test application in the IDE, it will not execute...
7
3028
by: Seth | last post by:
I have noticed that the id of my session object changes when I switch from a non-secure to a secure connection. What I'm trying to do: I have a cookie that is built on the non-secure side of things. What I need to do is to switch to a secure connection and then later on while still in that secure connection delete the cookie that was created on the non- secure side. I need to do this because I can not reference the non-secure cookie...
0
3232
by: ZMan | last post by:
Scenario: This is about debugging server side scripts that make calls to middle-tier business DLLs. The server side scripts are legacy ASP 3.0 pages, and the DLLs are managed DLLs converted/developed with VB.NET. What I want from debugging is to be able to step into the methods in the DLLs called from ASP scripts using Visual Studio .NET. Background: For typical script debugging issues, you can read and follow the two documents on...
5
375
by: Kelly G. | last post by:
Hi All I am developing a web application in .Net technology. Usually, I create a DLL for all of my modules to protect the logics. And it is possible to decompile the DLL. How do I protect DLL created using VISUAL STUDIO.NET 2002. I want to secure component design. Give me some professional techniques to secure the codes. Any 3rd party software must not be able to decompile it.
5
1702
by: =?Utf-8?B?TWljaGVsQFZvb3JidXJn?= | last post by:
Hi all, i've built a C# dll / component with some wonderful services to the clients Payroll service. As you might guess, i only want MY pogram to use this DLL. If some developer get's hold of a reference to my dll, he or she could easily use all methods to raise his or hers salary.... I tried code access security, bu i can only use that on Class level and not on Assembly level, and i've read that there are ways to work around this kind
0
9705
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
9576
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10567
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10323
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
7613
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5515
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
1
4291
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
3809
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
3
2983
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.