java obsfuticator (typos!)! - protect your source code

[Bill McNAMARA_1]

Hi,

I'm working on a java application running primarily on hp-ux.

I have recently learnt that it is quite simple to reverse engineer java classes to attain a near exact source replica - minus variable names.

I have also learnt that it is possible to protect the code in various manners from reverse engineering and am interested in hearing the + and - of all possible implementations.

One criticism of obsfuctication (sp?) is that it becomes difficult to debug code.. is there any better method?

All hint's / tips / links rewarded as per usual!

Thanks,
Bill

[Bill McNAMARA_1]

anyone?
Even small amounts of info are appreciated!

Bill

[Steven Sim Kok Leong]

Hi Bill,

My wife does ejb and weblogic a great deal and has played around with reverse engineering tools.

Will check with her tonight and get back to you. Regards.

Steven Sim Kok Leong

[Steve Lewis · Accepted solution]

Yes its true, 'compiled' Java is actually condensed pseudocode that can be easily reverse engineered.

Maybe you could have a look at

http://www.condensity.com

who do a obfuscation utility.

Steve

[Steven Sim Kok Leong]

Hi Bill,

Check this out:

How to lock down your Java code (or open up someone else's)

Your complete guide to the decompilation and obfuscation of Java code
Greg Travis (mito@panix.com)
Freelance Programmer
May 2001

http://www-106.ibm.com/developerworks/java/library/j-obfus/?loc=tstheme

Contents:

- What is decompilation?
- Disassembling a class file
- Using a decompiler
- Decompilation and the threat to security
- Obfuscation to the rescue
- New kids on the block

Hope this helps. Regards.

Steven Sim Kok Leong