Discuss: Defend against Reverse Engineering
by Roshen Chandran, CISSP
Hello Mr. Roshen,
Greetings!
Thanks for a very informative article. Indeed you seem to be well informed about the latest in code protection! I am a freelance IT consultant engaged in similar application auditing techniques.
Recently, one of my esteemed clients asked us to test their new analytic business application against possibility of misuse/cracking by users. The client is a leading software developer and application is due for release shortly. The application licensing would require each client license seat to be activated through internet during installation by the user. For those who do not have access to internet, there is a provision for offline activation by sending collected data (from users pc) to our clients website via email. Activation key is then sent on same email. Activation is probably based on combination of unique license serial number and some other (unknown !!) information collected from users pc.
At this stage, my client is not willing to share as to what data is collected from user PC to create an activation key. Could you please help us with some ideas/tips on how to progress on this testing. It is an important client for us and we would like to do a good job on this assignment. I would be very grateful for any information, websites or similar guidance that you can provide with regard to web-based application activations and cracks/keygen testing against the same.
Thanks
Talat M.
Email: talat.world@yahoo.com