English 中文(简体)
安全保卫 通过客户应用(如何保护逆向工程)进行服务器连接
原标题:Secure SQL Server connection through client application (how to protect reverse engineering)

我的要求是,申请安装过程的一部分包括需要SA特权的数据库设置和更新,但安装的窗口用户不会有这些密码。

因此,考虑采用安装装置,将密码带入,并将采取所有必要的行动。 还需要一个密码,根据某种算法发射安装机,使之每天独一无二,从而进一步确保安装。

现在,我的关切是,(如果现在知道的话,那就很简单,可以反映净应用,很容易地用上词。 因此,问题是我如何保护这一点。 令人信服的是,它永远不会带来这种好处。

最佳回答

can 谈到贵国为隐瞒秘密价值而申请的加密部分,但如果您的申请能够加以加密,你也需要在申请中储存钥匙。

DVD参与者就是这方面的一个很好例子——DVD通过一个称为Content Scramble System和每个DVD。 制造商将一个能够把DVD加密的钥匙放在角色本身。

The thing is though - if the end user s machine has the ability to run your code, then there s nothing you can do to truly prevent them from accessing the key. It s just a matter of time and effort for someone to figure out how, exactly, you ve obfuscated that. Just ask "DVD Jon", the developer of the DeCSS Application.

If you want to ensure security of information, don t put that information where a user can get to it. Host the database elsewhere and give the user credentials which have limited functionality.
Either that, or accept the fact that users will be able to bypass the security, and plan for that (eg: by not doing anything important locally).

问题回答

暂无回答




相关问题
Anyone feel like passing it forward?

I m the only developer in my company, and am getting along well as an autodidact, but I know I m missing out on the education one gets from working with and having code reviewed by more senior devs. ...

NSArray s, Primitive types and Boxing Oh My!

I m pretty new to the Objective-C world and I have a long history with .net/C# so naturally I m inclined to use my C# wits. Now here s the question: I feel really inclined to create some type of ...

C# Marshal / Pinvoke CBitmap?

I cannot figure out how to marshal a C++ CBitmap to a C# Bitmap or Image class. My import looks like this: [DllImport(@"test.dll", CharSet = CharSet.Unicode)] public static extern IntPtr ...

How to Use Ghostscript DLL to convert PDF to PDF/A

How to user GhostScript DLL to convert PDF to PDF/A. I know I kind of have to call the exported function of gsdll32.dll whose name is gsapi_init_with_args, but how do i pass the right arguments? BTW, ...

Linqy no matchy

Maybe it s something I m doing wrong. I m just learning Linq because I m bored. And so far so good. I made a little program and it basically just outputs all matches (foreach) into a label control. ...

热门标签