Protecting IL Code

From: YK (YK_at_discussions.microsoft.com)
Date: 06/30/04 

Date: Tue, 29 Jun 2004 23:45:02 -0700

All,

What is the best way to protect IL code?

---------------------------------------------------
Typical scenario:

Visual Studio .NET 2003 includes Dotfuscator Community Edition, which intends to protect IL code. However, many .NET applications use data binding in UI forms. For example:

  Employee e = new Employee();
  txtName.DataBindings.Add("Text", e, "Name");
  txtAddress.DataBindings.Add("Text", e, "Address");

In this scenarion, property names are coded as string to be resolved at runtime. After obfuscation, the property names in the Employee class have changed, but the string in the data binding code retained.

We can configure obfuscator tool with a list of exception names that the tool will not process. However, this maintains the property names, which eventually reveal the actual logic.

------------------------------------------

Thanks
-YK

Relevant Pages

  • Protect IL Code
    ... Typical scenario: ... After obfuscation, the property names in the Employee class have changed, but the string in the data binding code retained. ... We can configure obfuscator tool with a list of exception names that the tool will not process. ...
    (microsoft.public.dotnet.general)
  • Protect IL Code
    ... Typical scenario: ... After obfuscation, the property names in the Employee class have changed, but the string in the data binding code retained. ... We can configure obfuscator tool with a list of exception names that the tool will not process. ...
    (microsoft.public.dotnet.security)
  • Protecting IL Code
    ... Typical scenario: ... After obfuscation, the property names in the Employee class have changed, but the string in the data binding code retained. ... We can configure obfuscator tool with a list of exception names that the tool will not process. ...
    (microsoft.public.dotnet.general)
  • Re: Dotfuscator - major flaw in Microsoft dotNET?
    ... NET assembly and convert it back into source code such as .NET ... The idea of obfuscation is to make the goal of reverse ... value of the string used in reflection or dynamic class loading, ... With Dotfuscator Professional Edition, ...
    (microsoft.public.dotnet.general)
  • Re: [Full-Disclosure] Increase probe on UDP port 1026
    ... of script that assigns long string values to a couple of variables, ... that uses the shorter of the two string variables as the index for ... obfuscation goes... ...
    (Full-Disclosure)
Loading