Triple layer Secured communication tunnel has be used to prevent the probe insert and tracing in communication between APP and Lock/License:
API to Repository, API to SS, SS (Client end) to SS(Server end) for Network License;
License with digital signature to prevent hacker to create fake license;
Public key and asymmetric algorithm protected and encrypted with Virbox Compiler to prevent hacker to replace public key and algorithm;
Virtualization, Virtualization are popular technology used in software protection, Virbox virtualization engine is key component when software publisher protect the software, the advantage of Virbox virtualization engine includes not only to keep the software security in top level, but also introduce the "Analysis" feature to publisher before protection which can balance/evaluate the performance and protection level, so software publisher may have best optimized protection software with reasonable execution speed and suitable size of software, it also saves developer's workload in protection period by use of this "Analysis" feature.
Virbox Protection Compiler, it provides code obfuscation, compile functions in compiling period and give best effort in optimized protected software size, protected software covers EXE, DLL and any C/C++ program in code level with fast execution speed and smaller size compared with other compression technology.
Code Fragmentation, the concept of "Code porting/snippet" was initially proposed by Senseshield, the idea for code porting is put the key code need to be protected into the virtualization environment of the dongle and executed. Some challenge still existed in actual case, such as:
The idea of "code snippet is break down the software functions and feature needed to protect into a large amount of code snippet and executed in the secured virtual environment, which makes crack the software impossible. With Virbox protector, developer has ability to make code snippet automatically and free to select functions or code to be abstracted into VM environment, the code snippet process show below:
Anti-Hacker Service, usually, software will be protected in static level after use traditional protection technology: Obfuscation, Virtualization, it will not be update after software delivery to customer side, Virbox use "Anti-Hacker Service" and associated tools installed in customer side which provides pro-active detect hacker behavior when software execution, with Anti-Hook, Anti-Reverse engineering, Anti-Debug, update hacker database functionalities and features, it comprise a series Anti-Hacker technology to protect your software with dynamic way.
Process Protection: Real time protection to multiple process with light interface;
Hook Detection: Anti-Hook mechanism to detect all kinds of hook tools;
File Detection: Customized file signature mechanism, file signature and hook detection are combined to make it more difficult for hackers to make patches.
Precisely to detect the tamper software behavior according to critical character of debug, reverse engineer tools;
Abnormal Notification: The Anti-Hacker engine actively detects the software-user's abnormal status, notifies the developer in time, and developer obtains the information that the software is being decoded and attacked in the first time.
Anti-Hacker Database updating and upgrading;
Memory Protection Memory protection mechanism makes impossible for "Memory Editor" to modify data in memory;
Software Security Lab:
Role of Security Lab:
Senseshield has setup a dedicated expert team which have rich working experience in software protection and security area, with those expert's competence, Senseshield has established Software Security Lab to analysis frequently used crack tools and algorithm by hacker and define the key characteristic/features respectively and provide relevant defense solution and update to Anti-Hacker database in Virbox platform. These crack tools includes debug, hook, reverse engineering tools frequently used by hacker; with updated result output (Anti-Hacker Service) from security lab, Senseshield provides dynamic protection to software which delivered and operated in software user site.