The problem then becomes the link between the managed and unmanaged
code. Doing this just makes it easier for an attacker to isolate the
critical code, then bypass it completely.
Using a commercial obfuscator, encrypted loader is a good start
(see response to "Licence Key generator", a few posts up). However
depending on the apps and the attack you are trying to prevent, you
might want to consider doing a lot of "custom" anti-reverse
engineering or anti-cracking code.
I think the idea was that the 'secret' code also does the work
(proprietary algorithm, whatever), so bypassing it definitely doesn't
help in understanding its secrets.
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.