SafeNet Sentinel, Руководство разработчика

Страница: 167 / 282

Tips and Tricks
Sentinel Hardware Keys Developer’s Guide 149
Attack the Application
Since most software developers do not write security code everyday, this is
often the easiest target. Since a poorly protected application may only
require a few quick changes to operate without the Sentinel Key attached,
hackers might try code patching or fake the application components. Fortu-
nately, by using many of the tips in this chapter this can also be made
extremely difficult. The remaining chapter discusses such methods.
Tips and Tricks
We have provided many tips and tricks you can implement in your
application. Each tip protects against specific type of attack—and multiple
methods will complement each other.
Use Shell to Encrypt Your Executable (For Windows)
For Windows applications, you can combine your API elements-based cus-
tom protection with Shell and add an extra layer of protection. The Shell
encrypts your final executable, which makes it difficult to disassemble or
debug your application.
Even if the attacker manages to overcome the difficult task of removing the
Shell, the application inside is still protected—due to two strong layers of
protection.
Implement Query-Response Protection
The AES algorithm-based query/response protection is the primary method
of securing an application. Simply storing data in the key memory is rela-
tively easier to mimic because once the hacker knows what the memory
should contain, they can modify the application to return those values
instead of actually reading them from the Sentinel Key.
Query-response protection is a challenge-response like technique driven by
the AES algorithm programmed in the Sentinel Key. The application sends a
query to the Sentinel Key, which sends a response calculated using the AES