Questions tagged [code-access-security]

Code-access security is security specific to limiting access to or protecting source code, through the use of processes such as encryption, obfuscation, and more.

Code-access security is security specific to limiting access to or protecting source code, through the use of processes such as , , and more. The goal of code-access security is most often to protect functionality from competitors, to prevent reverse-engineering, or to preserve integrity of program communication protocols.

For more on obfuscation:

Note that security questions which are not about a specific programming problem may be better suited to our sister site, IT Security Stack Exchange.

337 questions
0
votes
0 answers

How to code important parts of an Android app in C/C++ and add them as a compiled library?

I am using Eclipse and Android Studio IDE for Android development. I have a problem on securing data that I hard-coded like public-key, authentication id etc.. in constant or XML file. How to avoid reverse engineering these values from apk? I have…
0
votes
0 answers

How to limit file reads to subdirectories from java app using security manager

I have simple web server and i'm running it in /myHome/serverHome directory. All code(classes) running on my JVM can read files in /myHome/serverHome and its sub directories. But i want to limit file reads of myHome/serverHome/conf directory to only…
sanjeewa.190
  • 360
  • 2
  • 8
0
votes
1 answer

Is content in an encrypted Flash container file more safe than as plain HTML/Javascript?

The current task is as follows: It's about publishing spreadsheet tables online and making them accessible only to registered subscribers. The access to these spreadsheets is meant to be a paid service. Subscribers may access them online from…
0
votes
0 answers

Java Web Start AccessControlException LoggingPermission

I get the following exception when running my JWS application, even though I signed all my jars and I added localhost to the Exception Site List. Missing Application-Name manifest attribute for: http://localhost/page/CWSExecution.jar Missing…
0
votes
0 answers

System.Security.VerificationException in Winform Application

C# Winform application working fine. But after Obfuscation and Merging of required dlls getting System.Security.VerificationException (Type argument 'T' violates the constraint of type parameter 'T').
user334223
  • 301
  • 2
  • 8
  • 17
0
votes
1 answer

Using evidence, security policy and permissions to prevent assembly from loading on web server

Assume a .NET class library code that, for example, writes to the Windows registry. Then this code has problem to run over internet, because default Internet policy does not give access to write to the registry. By adding a RequestMinimum statement…
ileon
  • 1,508
  • 1
  • 18
  • 25
0
votes
0 answers

Consolidating Code Access Security

Is it possible to consolidate code access security attribute (even if it means imperative method) so I can have something like this in my code? void WriteToFileAndAccessNetwork() { EnterPermission(Perm.File | Perm.Network); // Do file IO // Do…
0
votes
1 answer

TideSDK: Put all files into 1 *.exe and/or obfuscate the code

Has there been any movement of TideSDK adding capabilities to protect the source code of the applications we build using it. I have php files with database connection strings and I need to have my application launch on a public pc in an internet…
user2548054
0
votes
1 answer

Code Access Security problem - what's the issue here?

Background I have a post-build event which I use to generate some batch files which contain the current version number of our application. The event calls a batch file, which calls a managed app which loads the assembly and uses reflection to find…
Winston Smith
  • 21,585
  • 10
  • 60
  • 75
0
votes
0 answers

Secure PHP code on IIS

My web application is going to be installed at the customer's IIS7 server. The application is built in PHP and MySQL and is responsible for synchonizing data among the mobile devices of multiple users. Each user may send a request to the IIS7 server…
anna
  • 585
  • 1
  • 6
  • 22
0
votes
1 answer

"Request failed" when invoking a WCF operation in a partially-trusted AppDomain

I have a full trust .Net 4.5 application which creates a partial trust AppDomain. I'm trying to communicate with this domain via a WCF named pipe. I've successfully created the service and connected to it. However, when I try to call any of the…
Artfunkel
  • 1,832
  • 17
  • 23
0
votes
0 answers

BadImageFormatException when impersonating user

Im trying to impersonate a user from a windows forms application through the following code: public void Impersonate() { //elevate privileges before doing file copy to handle domain security WindowsImpersonationContext impersonationContext =…
Serve Laurijssen
  • 9,266
  • 5
  • 45
  • 98
0
votes
1 answer

Securing SQL Server 2008 R2 on Customers Network

We have a ASP.NET web application with SQL Server 2008 R2 as the backend. Our client wants the application hosted on their servers to which they will have full administrative access. I have 2 questions: 1 - Is there any good way of restricting…
0
votes
0 answers

Circular References For Packet Protocol Security Purposes? Alternate Solutions?

I'm working on a multiplayer game in the Unity framework with custom networking code programmed in C# (not using the built-in Unity networking framework). Due to the large scale (difficult to moderate many players) and competetive nature (don't…
0
votes
1 answer

SharePoint Code Access Security-requirements to call Page.TemplateControl.ParseControl

What are the CAS policy requirements to call the method Page.TemplateControl.ParseControl as referenced here? http://msdn.microsoft.com/en-us/library/kz3ffe28(loband).aspx Specifically, in SharePoint I've tried to call the method in a Minimum-trust…
anchorpoint
  • 386
  • 2
  • 7