Re: obfuscation question

From: Alek Davis (alek_xDOTx_davis_xATx_intel_xDOTx_com)
Date: 05/17/04

  • Next message: Robin: "How to Encrypt password" 
    Date: Mon, 17 May 2004 10:44:08 -0700

    Vadim,

    Some obfuscators provide a "string encryption" feature, which uses an
    embedded "encryption" algorithm to change application string values. This is
    not a bullet-proof option though. And in general, storing secrets in the
    application source code (of .NET/Java applications) is not a good idea.
    Check this article, it can give you some ideas (it also contains references
    to other resources, such as articles about obfuscation, which you may find
    helpful): "Safeguard Database Connection Strings and Other Sensitive
    Settings in Your Code" at
    http://msdn.microsoft.com/msdnmag/issues/03/11/ProtectYourData/.

    Alek

    "vadim" <vadim@dontsend> wrote in message
    news:Oyi5cogOEHA.3624@TK2MSFTNGP10.phx.gbl...
    > Hi,
    >
    > Will obfuscation help in securing hard coded key in asp.net application?
    >
    > Thank you
    >
    > Vadim
    >
    >

  • Next message: Robin: "How to Encrypt password"

    Relevant Pages

    • Re: Dotfuscator - major flaw in Microsoft dotNET?
      ... NET assembly and convert it back into source code such as .NET ... The idea of obfuscation is to make the goal of reverse ... value of the string used in reflection or dynamic class loading, ... With Dotfuscator Professional Edition, ...
      (microsoft.public.dotnet.general)
    • Re: [Full-Disclosure] Increase probe on UDP port 1026
      ... of script that assigns long string values to a couple of variables, ... that uses the shorter of the two string variables as the index for ... obfuscation goes... ...
      (Full-Disclosure)
    • Re: Security of Obfuscators
      ... serious limit to the amount of determination someone is going to put into ... obfuscator with string encryption, but $1900 is quite a different story. ... > considering that obfuscation is but a small barrier to a good reverse ... but we have a project that is open source. ...
      (microsoft.public.dotnet.languages.csharp)
    • Protecting IL Code
      ... Typical scenario: ... After obfuscation, the property names in the Employee class have changed, but the string in the data binding code retained. ... We can configure obfuscator tool with a list of exception names that the tool will not process. ...
      (microsoft.public.dotnet.general)
    • Protecting IL Code
      ... Typical scenario: ... After obfuscation, the property names in the Employee class have changed, but the string in the data binding code retained. ... We can configure obfuscator tool with a list of exception names that the tool will not process. ...
      (microsoft.public.dotnet.general)