Introduction to Active Tamper Defense

Glossary Item Box

Beyond Obfuscation: Simulating Tampering | Supported .NET Application Types

Dotfuscator Software Services Community Edition by PreEmptive Solutions

www.preemptive.com

Introduction to Active Tamper Defense

Dotfuscator CE provides a way for your applications to detect and optionally notify you if they have been tampered with since they were instrumented with tamper notification. 

To detect tampering, place InsertTamperCheck attributes on one or more methods in the application that are always executed. When Dotfuscator encounters an InsertTamperCheck attribute during its processing, it adds code that performs an assembly level integrity check at runtime. If the integrity check fails, it sends a tamper detected message to the Runtime Intelligence service. It can also call code that exits the application. InsertTamperCheck attributes are not required at runtime; therefore, Dotfuscator strips them from the output application.

An application can contain any number of InsertTamperCheck attributes. In the event that an application has been tampered with, multiple tamper detected messages from the same application session will be sent with the same group ID.

Do not put this attribute on the same method containing the Setup Attribute. Methods with this attribute must be executed after the method containing the Setup Attribute.

In Dotfuscator CE, InsertTamperCheck attributes may only be placed in assemblies that are EXEs.  Dotfuscator CE does not support tamper detection on library assemblies (DLLs).

In this section

Simulating Tampering

Supported .NET Application Types

Beyond Obfuscation: Simulating Tampering | Supported .NET Application Types

© 2002-2009 PreEmptive Solutions. All rights reserved.