Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / .NET Framework / New Users / January 2005

Tip: Looking for answers? Try searching our database.

Securing DLLs, Running App and AppDomain

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Carlos Campos - 06 Jan 2005 17:21 GMT
Hi:

I want to create a DLL that only can be used from applications signed with
my strong key file.

I have checked the StrongNameIdentityPermissionAttribute but it does not
work for me. So I did the next logic: When someone access the code in the
DLL, the class contained check the running application friendly name, find
the application executable, obtain its public key token and compare it with
the self public key token, if it is the same continue with the execution.

But the problem is i found applications can change its friendly name... how
can I be sure the application.exe that is running?

Or there is another way to secure who uses my dll file?
Mattias Sj?gren - 06 Jan 2005 17:31 GMT
Carlos,

>I have checked the StrongNameIdentityPermissionAttribute but it does not
>work for me.

What doesn't work?

It seems to be better to figure out how to do it the supported way
than to implement your own hack.

Mattias

Signature

Mattias Sjögren [MVP]  mattias @ mvps.org
http://www.msjogren.net/dotnet/ | http://www.dotnetinterop.com
Please reply only to the newsgroup.

Carlos Campos - 06 Jan 2005 17:53 GMT
Here is the reason:

"Full demands for StrongNameIdentityPermission succeed only if all the
assemblies in the stack have the correct evidence to satisfy the demand."

I want to check only the application, we use third party dlls between the
stack, so I think my application will fail. Also, what happens with COM+,
they run under Framework DLLs with another strongName, or not?

"Mattias Sjögren" wrote:

> Carlos,
>
[quoted text clipped - 7 lines]
>
> Mattias

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.