Wibu-Systems' Video Podcast Channel

In its mission to deliver unique, most secure and highly versatile technologies to software publishers and intelligent device manufacturers, Wibu-Systems has developed CodeMeter, a comprehensive and award-winning suite of hardware- and software-based entitlement solutions for the protection of software rights and technical know-how against piracy, reverse engineering, tampering, sabotage, and espionage.

AxProtector exposed - Integrity protection of a modular application 

2014-04-24

Convenience is the natural enemy of security. How to calibrate the two factors? Who is involved in the process? What is the optimal ratio for your specific scenario? Let's discover this critical aspect together.

Pretty frequently, protection and licensing of a complete software modular application are handled via a central component (“license.dll”). This is especially true for articulated applications, consisting of several modules (.exe and .dll). In this case, the emphasis is usually on ease, convenience and cost containment for the whole process. The downside though is in terms of security: the hacker will also commonly have an easy way in his attempt to bypass protection and licensing: He will just have to replace the central license.dll with his own implementation. On the other side, the security maniacs will care of all the details, oftentimes missing the scope of application performance and cost sustainability.
AxProtector, the core engine of Wibu-Systems CodeMeter, shows that convenience and security are not fully incompatible.

  • AxProtector protects all that is required: each module (.exe or .dll) that needs copy protection from IP infringements and individual licensing is encrypted, so that the central license.dll is no longer called for
  • AxProtector is attentive to the economy of your enterprise: it is fully automatized

But AxProtector can do even more. It does ensure the integrity of the complete application. Each .dll can be loaded only from the designated application. The intrusion of a foreign .dll in your application is just as impossible as the misuse of your .dll in a foreign product. And even the individual modules are protected with a self-check against manipulation.

During this presentation we will explore the following main topics:

  • Requirements of integrity protection
  • Analysis of the preventive aspects
  • The chicken and egg problem in verification: .exe or .dll
  • Detection and response to tampering
  • Basics of asymmetric cryptography
  • Hardware vs Software based protection
  • Live demonstration of AxProtector: what it performs automatically and what you should be attentive to

No need to sacrifice or compromise: Convenience and security can definitely be best friends. It's just a matter of accurate balance.

Categories | Software Protection | Software Security

Download

Filetype: M4V - Size: 199.76MB - Duration: 1:21:19 m

GIVE US FEEDBACK >>HERE<<

 

The Wibu-Systems Podcast

WIBU-SYSTEMS AG (WIBU®), a privately held company founded by engineers Oliver Winzenried and Marcellus Buchheit in 1989, is an innovative technology leader in the global software license lifecycle management. In its mission to deliver unique, most secure and highly flexible technologies to software publishers and industrial manufacturers, Wibu-Systems has developed a comprehensive, award-winning suite of hardware- and software-based solutions incorporating internationally patented processes dedicated to the integrity protection of digital assets and intellectual property. Wibu-Systems’ product portfolio addresses a wide variety of application delivery models, including PCs, mobile, embedded automation, cloud computing, SaaS, and virtualized architectures. 

Through its motto “Perfection in Protection, Licensing and Security”, Wibu-Systems is standing up for ethically produced software and reinforces its vocation to eradicate software counterfeiting, reverse engineering, code tampering, as well as device and smart factory sabotage, espionage and cyber-attacks.

With its flagship CodeMeter® all-in-one security platform, Wibu-Systems facilitates software monetization techniques to meet the increasing demand for top line revenue growth through the reduction of bottom line costs and the enablement of new marketing strategies. Software powered businesses, whether in the consumer, corporate or embedded systems realm, can create, deliver, and manage an entire orchestration of ready-made license models able to address their singular needs. In a market that is becoming more and more customer oriented, it is strategic to also personalize the offering terms of functionalities, pricing and compliance, and this is where Wibu-Systems enters the game with value added consulting services, localized engineering support and secure hosting.

With more than 50% of its employees involved in research and development, Wibu-Systems has pioneered a number of ingenious technologies, and empowered software developers and intelligent device manufacturers to deliver secure products that meet their customers’ needs. In fact, Wibu-Systems’ CodeMeter and WibuKey security solutions have won several hackers’ contests and are acknowledged and trusted worldwide. Sophisticated use of cryptography, secure key storage, full integration of an unparalleled line-up of form factors within the same framework, license model agnostic hardware, and interoperability with all major computer-based, embedded, real time and PLC operating systems are some of the key differentiators that allow Wibu-Systems to position itself at the forefront and propel software businesses to new heights.

Wibu-Systems is DIN EN ISO 9001:2008 certified and an active member of international and domestic organizations, like BITKOM, VDMA, IIC or TCG as well as standardization committees, such as the USB Implementers Forum, the SD Cards Association and the OPC Foundation. Wibu-Systems has qualified itself as a certified Microsoft Gold OEM Hardware Partner and Wind River Validated Partner; it has also joined the developer programs of Adobe, Apple, Autodesk, Oracle, QNX, and many others. The company’s products have received several awards: Just in 2014, CodeMeter has won the SIIA CODiE Awards for “Best Content Rights and Delivery Solution”, and the German IT-Security Prize for BlurryBox® cryptography. CmStick has also been granted the International iF Product Design Award and has been nominated for the German design award (Designpreis der Bundesrepublik Deutschland).

The company is leading different research projects with universities and other bodies, partially funded by the German BMBF (Ministry for Education and Research) and BMWE (Ministry for Economic Affairs). Among them are MimoSecco, EmbOSYST and OpSIT, respectively for cloud computing, embedded operating systems and smart technologies. Wibu-Systems is also cooperating with KIT (the Karlsruhe Institute of Technology), the Fraunhofer Institute, DFKI (the German Research Center for Artificial Intelligence), SmartFactoryKL and FZI (the Research Center for Information Technology) on a number of research and development activities.

Headquartered in Karlsruhe, Germany, Wibu-Systems holds wholly owned subsidiaries in Seattle, USA, as well as in Shanghai and Beijing, China; the company also has sales offices in Belgium, France, the Netherlands, Portugal, Spain, the United Kingdom and a capillary world distribution network.

Legal notice