Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to obfuscate web app before publishing?

I have a Visual Studio 2008 solution with number of DLLs and web application uses them as a main project. It's a commercial banking and accounting software (thin client) and I don't want a client getting access to the source in circumvention of mine.

I want to obfuscate all resulting assemblies before publishing them onto a web server via menu Publish.

How can I do that? How to insert obfuscating step before building and publishing? Using msbuild?

Edit: Thanks to everybody for answering! But my question is more about concrete task (obfuscating in VS on publishing) than about obfuscating in general.

like image 356
abatishchev Avatar asked Mar 10 '10 12:03

abatishchev


People also ask

How do you implement obfuscation?

Obfuscation means to make something difficult to understand. Programming code is often obfuscated to protect intellectual property or trade secrets, and to prevent an attacker from reverse engineering a proprietary software program. Encrypting some or all of a program's code is one obfuscation method.

What are the obfuscation techniques?

Obfuscation is an umbrella term for a variety of processes that transform data into another form in order to protect sensitive information or personal data. Three of the most common techniques used to obfuscate data are encryption, tokenization, and data masking.

What is App obfuscation?

Source Code Obfuscation Helps Combat Hacking Code obfuscation is a security strategy that deliberately disguises code to frustrate and delay hackers in their attempts to understand how an application's code works.


2 Answers

There are several obfuscation products out there.

Visual Studio even ships with one - DotFuscator, though there are others.

Here is some DotFuscator documentation.

However, even with obfuscation a determined hacker will be able to reverse engineer your code.

like image 143
Oded Avatar answered Oct 11 '22 08:10

Oded


where do expect hijacking from? from users or from hoster? First you shouldn't put source codes on site, just compiled assemblies, second you should put assemblies in folders where users can't access them. If you are afraid of hoster you should use obfuscator, just google them there are a lot of in the market.

like image 24
Andrey Avatar answered Oct 11 '22 10:10

Andrey