Home All Groups Group Topic Archive Search About

.NET 2003 DLL - how secure?

Author
23 Aug 2005 8:22 AM
Rob R. Ainscough
If I distribute my class libraries along with my ASP.NET code -- how secure
are my DLLs?  Can anyone gain access to them other than the ASP.NET
application(s) using them?  I was reading the Microsofts .NET security book
and they suggest that .NET DLL can easily be decompiled -- if this is
correct, is there anyway to secure the DLLs my ASP.NET code uses?

Author
23 Aug 2005 9:37 AM
Dominick Baier [DevelopMentor]
Hello Rob,

against which type of attacker do you want to guard?? someone with local
access to your binaries - yes decompilation is easily possible.

Over HTTP - not easily possible (besides server misconfiguration or application
level vulnerabilities)

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Show quoteHide quote
> If I distribute my class libraries along with my ASP.NET code -- how
> secure are my DLLs?  Can anyone gain access to them other than the
> ASP.NET application(s) using them?  I was reading the Microsofts .NET
> security book and they suggest that .NET DLL can easily be decompiled
> -- if this is correct, is there anyway to secure the DLLs my ASP.NET
> code uses?
>
Author
23 Aug 2005 3:03 PM
Rob R. Ainscough
Over HTTP, no local access.

Thanks.

Show quoteHide quote
"Dominick Baier [DevelopMentor]" <dbaier@pleasepleasenospamdevelop.com>
wrote in message news:780616632603939125408474@news.microsoft.com...
> Hello Rob,
>
> against which type of attacker do you want to guard?? someone with local
> access to your binaries - yes decompilation is easily possible.
>
> Over HTTP - not easily possible (besides server misconfiguration or
> application level vulnerabilities)
>
> ---------------------------------------
> Dominick Baier - DevelopMentor
> http://www.leastprivilege.com
>
>> If I distribute my class libraries along with my ASP.NET code -- how
>> secure are my DLLs?  Can anyone gain access to them other than the
>> ASP.NET application(s) using them?  I was reading the Microsofts .NET
>> security book and they suggest that .NET DLL can easily be decompiled
>> -- if this is correct, is there anyway to secure the DLLs my ASP.NET
>> code uses?
>>
>
>
>