out-of-the-box_馆档网

out-of-the-box

下载该文档文档格式：PDF 更新时间：2010-07-01 下载次数：0 点击次数：1

文档基本属性

文档语言：

Simplified Chinese

文档格式：

pdf

文档作者：

zhoubo

关键词：

主题：

备注：

点击这里显示更多文档属性

Page 7
Summary
That's not the way to do it!"
API calls only offers NO security for .NET assemblies
Classical mistakes
One central class which has easy to guess names Reduction to Yes | NO decision
Methods of the hackers
Patch yes to no (or other direction) Exchange of code fragments Inject code at any place of the software
VKSI-Day 25.06.2010 Page 8
Windows applications API calls only
VKSI-Day 25.06.2010
Page 9
OllyDbg
VKSI-Day 25.06.2010
Page 10
IDA Pro
VKSI-Day 25.06.2010
Page 11
Summary
Not really more difficult (as with .NET)
Easy API calls doesn't offer security for Win apps Crack without having a license
Classical mistakes
Error message directly after error occurs Yes | No decision
Hacker's methods
Debugging until the error message Analyzing the code in debugger and disassembler Patching Yes to No, exchange of code
VKSI-Day 25.06.2010 Page 12
Usage of Encryption
VKSI-Day 25.06.2010
Page 13
The question!
What should I encrypt
Software protection offers base API "Which data" depends on the software
Encrypted Data in Source (Data)
Required strings and mathematical constants
Automatic Executable Area Encryption
Encryption of executable code Do it yourself of use of "out-of-the-box" solution VirtualProtect / Reflection API / Tools Decrypt when Performance
VKSI-Day 25.06.2010 Page 14
Encrypted Data In Source
VKSI-Day 25.06.2010
Page 15
CodeMeter does something special!

文档基本属性
文档语言：	Simplified Chinese
文档格式：	pdf
文档作者：	zhoubo
关键词：
主题：
备注：
点击这里显示更多文档属性
经理：
单位：	college
分类：
创建时间：
上次保存者：
修订次数：
编辑时间：
文档创建者：
修订：
加密标识：
幻灯片：
段落数：
字节数：
备注：
演示格式：
上次保存时间：