Click here to Skip to main content
       

C#

 
QuestionHow do you protect your app hosting third party dll ...? [modified] Pinmemberdevvvy2-Mar-11 22:32 
Hi
 
One question - is it impossible to safe guard an application hosting third party dll?
 
See this thread, even if third party dll loaded into separate AppDomain, it can still access AppDomain.Current.Get/SetData[^]
 
In addition to AppDomain.Current.Get/SetData, can third party examine application memory. For example, hosting application may contain a secret/private key in some application context, which is used to decrypt communications or licensing file. Even if private key is not placed in AppDomain.Current.Get/SetData, is it possible for third party dll to ... perhaps "reflect" on the process memory foot print and extract the private key?
 
If the answer is yes - then it follows really the moment you load a third party dll into your own process, you cannot be sure if your process has been compromised?
 
I think security is even more important than say process isolation safe guarding against crashes in third party dll.
 
Thanks
 
NOTE: This is NOT a question on CAS[^] as setting permissions/evidence doesn't has anything to do with access to AppDomain from third party dll[^]
 
Also, this is not a question on serializing access to a singleton instance object[^]
dev
modified on Thursday, March 3, 2011 5:41 AM

AnswerRe: How do you protect your app hosting third party dll ...? PinmemberEddy Vluggen3-Mar-11 7:58 
GeneralRe: How do you protect your app hosting third party dll ...? Pinmemberdevvvy3-Mar-11 16:21 
GeneralRe: How do you protect your app hosting third party dll ...? PinmemberEddy Vluggen4-Mar-11 12:04 
GeneralRe: How do you protect your app hosting third party dll ...? [modified] Pinmemberdevvvy4-Mar-11 23:28 
GeneralRe: How do you protect your app hosting third party dll ...? PinmemberEddy Vluggen5-Mar-11 4:02 
GeneralRe: How do you protect your app hosting third party dll ...? Pinmemberdevvvy5-Mar-11 15:24 
GeneralRe: How do you protect your app hosting third party dll ...? PinmemberEddy Vluggen7-Mar-11 1:41 
GeneralRe: How do you protect your app hosting third party dll ...? Pinmemberdevvvy7-Mar-11 15:27 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.


Advertise | Privacy | Mobile
Web03 | 2.8.141223.1 | Last Updated 27 Dec 2014
Copyright © CodeProject, 1999-2014
All Rights Reserved. Terms of Service
Layout: fixed | fluid