.NET Code reverse engineering

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Lelic - 15 Sep 2005 13:07 GMT

Hi all. I'm fairly new to the .NET platform development, so if my
question is not worded correctly, I apologize. With that said … I have been
tasked to convert a VB6 app to c#. The app has a thick VB client and
communicates via internet with database. At the first glance I was going down
the path of Remoting for communication, but than I have read couple of post
about how easy it is to reverse engineer the .NET code. I’m concerned that
now my Remote server component’s interface and location will be exposed. The
data is highly sensitive, so I’m looking for a suggestion on how to protect
compiled code from reverse engineering. Any suggestions are appreciated.

Reply to this Message

Michael Nemtsev - 15 Sep 2005 19:53 GMT

Hello Lelic,

L> have been tasked to convert a VB6 app to c#. The app has a thick VB
L> client and communicates via internet with database. At the first
L> glance I was going down the path of Remoting for communication, but

Remoting over what? SOAP, binary? Why did u choose remoting?

L> than I have read couple of post about how easy it is to reverse
L> engineer the .NET code. I'm concerned that now my Remote server
L> component's interface and location will be exposed.
L> The data is highly sensitive, so I'm looking for a suggestion on how to
protect
L> compiled code from reverse engineering. Any suggestions are
L> appreciated.
L>

sure, but nothing is perfect. What kinda info u wanna protect? just code?
mb look at protection of your data, not code?
.net gives u standart CryptoAPI. u can start from it.

---
WBR,
Michael Nemtsev
blog: http://spaces.msn.com/members/laflour

"At times one remains faithful to a cause only because its opponents do not
cease to be insipid. (c) Friedrich Nietzsche

Reply to this Message

Lelic - 15 Sep 2005 20:03 GMT

While protecting the data is a very good suggestion, I would like to find out
how I can protect my server. This will be win app that will access a remote
server, which in turn has a direct access to database. My concern is that
somebody can get to the database through the interfaces of the server
component.

> Hello Lelic,
>
[quoted text clipped - 24 lines]
> "At times one remains faithful to a cause only because its opponents do not
> cease to be insipid. (c) Friedrich Nietzsche"

Reply to this Message

Michael Nemtsev - 16 Sep 2005 08:48 GMT

Hello Lelic,

L> While protecting the data is a very good suggestion, I would like to
L> find out how I can protect my server. This will be win app that will
L> access a remote server, which in turn has a direct access to
L> database. My concern is that somebody can get to the database through
L> the interfaces of the server component.

Make your connection to the interfaces protected, use Security, deny anonymouse
access and some other stuff
One example is to use Web-services and WS-E

---
WBR,
Michael Nemtsev :: blog: http://spaces.msn.com/members/laflour
"At times one remains faithful to a cause only because its opponents do not
cease to be insipid. (c) Friedrich Nietzsche"

Reply to this Message

[MSFT] - 16 Sep 2005 02:54 GMT

Hello,

To against reverse engineering for .NET code, you try a tool "DotFuscator":

http://www.gotdotnet.com/team/dotfuscator/

Hope this help,

Luke

Reply to this Message

.NET Code reverse engineering

Free Magazines