net反应堆

更新

Jared指出de4dot声称能够反编译它。

.NET Reactor provides complete protection for your sensitive intellectual property by converting your .NET assemblies into unmanaged processes which cannot be understood as CIL, and which no existing tool can decompile. Hackers have no access to any intelligible form of your source. Powerful and flexible, the .NET Reactor licensing features allow you to enforce your license conditions and protect your revenue stream by using hardware and software locks. The license manager can build trial or permanent licenses, in a matter of seconds. A fully documented software development kit (SDK), complete with examples, allows you to call the licensing system directly from your code, allowing you to create custom extensions to the licensing system.

我也做了一些关于黑客安全的考虑，在我的设计中，我想添加他们，因为他们中的一些人似乎没有被提及:

我在我的应用程序中有一个脚本接口。为了确保，脚本只能调用(python)打算调用的方法-脚本i有一个scriptvisibilityattribute和System.Dynamic.DynamicMetaObjectProvider，它可以识别这些属性。

license使用公钥/私钥。

ViewModels需要被解锁，给解锁函数一个密码。

CoreRoutines可以在加密狗上实现。(周围有加密狗支持)

像包装这样的大解决方案并不是计划好的。

当然，这种脚本/viewModel方法并没有使我们不可能从代码中解锁和调用脚本不可见的函数，但它使这样做变得更加困难——就像所有与反黑客相关的工作一样。

是的，. net二进制文件(EXE和DLL)可以很容易地反编译成接近源代码。检查. net Reflector工具。在任何。net二进制文件上尝试一下。最好的选择是混淆文件，它们仍然可以被。net Reflector反编译，但它们会造成一团不可读的混乱。我不认为好的混淆器是免费或廉价的。一个是Visual Studio附带的Dotfuscator社区版。

只需编写一个好的应用程序和一个简单的保护系统。不管你选择什么保护，它都会被逆转……所以不要浪费太多时间/金钱。

好吧，你不能完全保护你的产品不被破解，但你可以最大化/增强安全级别，让它有点难以被新手和中级破解者破解。

但请记住，没有什么是不可破解的，只有服务器端的软件受到了很好的保护，无法被破解。无论如何，为了增强应用程序中的安全级别，您可以执行一些简单的步骤来防止某些黑客“不是全部”破解您的应用程序。下面这些步骤会让你抓狂甚至绝望:

Obfuscate your source code, obviously this will make your source code look like a mess and unreadable. Trigger several random checking routines inside your application like every two hours, 24 hours, one day, week, etc. or maybe after every action the user take. Save your released application's MD5 checksum on your server and implement a routine that can check the current file MD5 checksum with the real one on you server side and make it randomly triggered. If the MD5 checksum has been changed that means this copy has been pirated. Now you can just block it or release an update to block it, etc. Try to make a routine that can check if some of your codes (functions, classes, or specific routines) are actually have been modified or altered or even removed. I call it (code integrity check). Use free unknown packers to pack your application. Or, if you have the money, go for commercial solutions such as Thamida or .NET Reactor. Those applications get updated regularly and once a cracker unpack your application, you can just get a new update from those companies and once you get the new update, you just pack your program and release a new update. Release updates regularly and force your customer to download the latest update. Finally make your application very cheap. Don't make it too expensive. Believe me, you will get more happy customers and crackers will just leave your application, because it isn't worth their time to crack a very cheap application.

这些只是防止新手和中级破解者破解应用程序的简单方法。如果您有更多保护应用程序的想法，请不要羞于实现它们。这只会让破解者的生活变得艰难，他们会感到沮丧，最终他们会离开你的应用程序，因为它不值得他们花费时间。

最后，你还需要考虑花时间编写一个好的、高质量的应用程序。不要把时间浪费在编写复杂的安全层上。如果一个优秀的破解者想要破解你的应用程序，无论你做什么，他/她都会做。

现在去实现一些玩具饼干…

你无法阻止别人破解你的软件。

However, you can make them create cracks that will hurt your sales less. Keygenerators that can issue a valid registration code for your software are much worse than simple patches that remove registration incentives from your software. That's because a crack will work for one software version only, and will cease to work with the next software update you release. The keygenerator will continue to work until you change your registration key algorithm and that's something you don't want to do often because it will put off your honest clients.

因此，如果您正在寻找一种方法来对抗非法的密钥生成器，并且您不想使用不对称加密，因为这会生成很长的注册码，您可以看看部分密钥验证。

Partial Key Verification makes sure that each illegal keygenerator works only for one particular release of your software. Basically what you do is to make sure that each release of your software only links with the code for checking SOME digits of the registration code. Which digits exactly is random, so crackers would have to reverse engineer many different versions of your software and combine all this into one keygenerator in order to release a keygenerator that works for all versions of your software.

如果你定期发布新的软件版本，这将导致大量的密钥生成器散布在各种软件盗版档案中，这些文件不再工作。潜在的软件盗版者通常会寻找最新版本的破解或关键元素，所以他们可能会尝试其中的一些，并最终放弃。

我在我的(c++)新共享游戏中使用了部分密钥验证，它非常有效。之前我们遇到了很多无法对抗的关键生成器问题。后来出现了许多漏洞，一些按键生成器只适用于特定版本的游戏，但没有一个按键生成器适用于所有版本。我们定期发布游戏的小更新，让之前存在的所有漏洞都变得无用。

似乎有一个用于部分密钥验证的开源。net框架，尽管我还没有尝试过。