Questions tagged [code-access-security]

Code-access security is security specific to limiting access to or protecting source code, through the use of processes such as encryption, obfuscation, and more.

Code-access security is security specific to limiting access to or protecting source code, through the use of processes such as , , and more. The goal of code-access security is most often to protect functionality from competitors, to prevent reverse-engineering, or to preserve integrity of program communication protocols.

For more on obfuscation:

Note that security questions which are not about a specific programming problem may be better suited to our sister site, IT Security Stack Exchange.

337 questions
0
votes
1 answer

how to manage an asymmetric key inside a key container for an enterprise software?

hello i have an educational software that should be installed on different PCs across the enterprise. my program is using a 5000 text, xml, html files as source of it's content. i don't want my source to be tampered with, copied or used illegally.…
0
votes
2 answers

How to lock down a distributed DLL?

I have a shared .Net DLL that is used by a few applications and a publicly usable API. I plan to distribute the API DLL, but because of the link have to distribute the shared dll also. What is the best option to prevent uneccessary classes and data…
Telavian
  • 3,752
  • 6
  • 36
  • 60
0
votes
1 answer

Make Flash Movies not downloadable

is there any way, to hide the source of a flash in the sourcecode, so that the movie itsself is not downloadable, or better not to copy?
Lars
  • 1
0
votes
2 answers

Securing Algorithms in SGX

I am looking for an explanation how to protect an algorithm say a function mysort(param x, param y) in the context of Intel SGX such that outside my enclave mysort() function is encrypted and it only decrypts inside enclave. How could I achieve this…
Kumar Roshan Mehta
  • 3,078
  • 2
  • 27
  • 50
0
votes
1 answer

How to mark DynamicMethod as SecurityCritical?

I'm using a slightly modified version of this TaskFromEvent method. It basically creates a Task that completes when the Event fires. This is made possible by using DynamicMethod and emitting IL code. When I do some simple tests in dummy environment,…
m93a
  • 8,866
  • 9
  • 40
  • 58
0
votes
6 answers

Corporate Espionage of Website Source Code

This may not be the most technical question, but I was just interested, nonetheless... How does a giant company like Google keep from having their code stolen by employees? Maybe I'm wrong, but I would assume that their source code to their search…
ServAce85
  • 1,602
  • 2
  • 23
  • 51
0
votes
3 answers

Why can't my ASPX pages access directories on the webserver iteself?

I have a web client that sends a request in the form of XML to my web server. The web server creates a (rather large) file and saves it in a cached directory and returns it to the web client through the response stream. This worked fine the first…
Jordan
  • 9,642
  • 10
  • 71
  • 141
0
votes
2 answers

Do I need to worry about link-demands in a full-trust only .EXE?

I'm trying to understand FxCop CA2122 messages (probably before disabling the wretched things), and I have clearly overstepped my understanding of .NET CAS. The application is a .EXE, not marked with AllowPartiallyTrustedCallers. We get CA2122…
Will Dean
  • 39,055
  • 11
  • 90
  • 118
0
votes
1 answer

Question about the working paradigm of Code Access Security (CAS)

I wrote the following code to test the CAS: [SecurityPermission(SecurityAction.Demand,Flags=SecurityPermissionFlag.Execution)] static void Main(string[] args) { Console.WriteLine("hello, world!"); } In the .NET 2.0…
smwikipedia
  • 61,609
  • 92
  • 309
  • 482
0
votes
1 answer

GetDirectories call in msi CustomAction throws security exception ONLY when All Users

I have a custom action that I'm using to deploy some files that sit next to the msi in the handoff package. My custom action is passed the msi path via the OriginalDatabase parameter and I'm checking to see if there is a folder next to it. Nothing…
0
votes
1 answer

How to Grant Permissions to Folder on Network , vs 2008 framework 3.5

I'm using Visual Studio 2008 on my local PC. My Code kept on network Drive. when i am trying to run it from my local machine i am getting below security exception.is there anyway i can Grant Permissions to network folder? *Security Exception…
Hari
  • 49
  • 1
  • 1
0
votes
2 answers

Requesting the CAS Security Settings for an assembly at runtime - C# .NET 2.0

how can I check the security setting of a loaded assembly at runtime with C# .NET 2.0 (VS 2005)? I'm loading the assembly with: Assembly externalAssembly = Assembly.LoadFrom(path); May be the path is local or it is a remote UNC Path (Network…
0
votes
1 answer

Remote email/license verification idea for digital software upgrader

I have a wordpress theme that I support and upgrade frequently. It contains a built in upgrader routine that takes a zip file containing the updated files and extracts to the theme directory, overwriting the old files. I'd like to add a license…
Scott B
  • 38,833
  • 65
  • 160
  • 266
0
votes
1 answer

Access Security. Stop a database from being copied to another computer

I have a database solution that can be sold to clients but I don't want a client to then pass on that database to someone else. Much like MS office won't install on more than one machine. Is it possible to have an AutoExec run that would check that…
0
votes
2 answers

CodeAccessSecurityAttribute derived class throwing System.TypeLoadException (Failure has occurred while loading a type)

I have custom attribute applied to CRUD repository methods to control access: Public Class SecureDbContextGenericRepository(Of TEntity As Class, TContext As DbContext) Inherits DbContextGenericRepository(Of TEntity, TContext) Public Sub…
Ondřej
  • 1,645
  • 1
  • 18
  • 29