Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How secure will your code be with obfuscation?

Using RedGate's Reflector, you may easily get the full source for an application. But to reduce the chances of an algorithm being found out, there are obfuscators to reduce this likelihood.

My questions are:

  • How effective are obfuscators?
  • What is safer in terms of hiding your algorithms: C++ without .NET libraries or obfuscated .NET programs.
  • Are there any others way to make .NET source code even more secure?
like image 414
seeker Avatar asked Aug 25 '12 07:08

seeker


People also ask

Is obfuscation encrypted?

Obfuscation is an umbrella term for a variety of processes that transform data into another form in order to protect sensitive information or personal data. Three of the most common techniques used to obfuscate data are encryption, tokenization, and data masking.

What is code obfuscation used for?

The goal of code obfuscation is to prevent any unauthorized party from accessing and gaining insight into the logic of an application, which prevents them from extracting data, tampering with code, exploiting vulnerabilities, and more.

What does obfuscation mean in security?

Obfuscation refers to the process of concealing something important, valuable, or critical. Cybercriminals use obfuscation to conceal information such as files to be downloaded, sites to be visited, etc.


1 Answers

If you definitely want to secure something, go for C++, as in the .NET World there is a powerful deobfuscator named de4dot (see here: https://github.com/0xd4d/de4dot) that deobfuscates what most obfuscators on the market produce, event the ones it does not explicitely know.

However, this will only raise the bar, as even in the c++ world, there are powerful tools also (IDA: http://www.hex-rays.com/products/ida/index.shtml).

There are other solutions, like mixed code assemblies where you can have the part you want to hide in native code and the rest in managed. see here for more: Mixed (Native and Managed) Assemblies

like image 90
Simon Mourier Avatar answered Sep 20 '22 10:09

Simon Mourier