How i deploy Java application securly


DevX Home    Today's Headlines   Articles Archive   Tip Bank   Forums   

Results 1 to 4 of 4

Thread: How i deploy Java application securly

Hybrid View

  1. #1
    anvar Guest

    How i deploy Java application securly


    hi everybody,
    I hope any one of u can help me. Because this is my last resort.
    My problem is describing below.
    I have created a java application(Stand alone). I have to install that into
    a machine. When I am installing any how i have to copy all .class files to
    the system. When I am copying, how will I secure those files. Means if a
    person knows where the class files is loaded, he can declompile the application,
    that will gives the original source code, and he can make changes into that
    and recopy. This will spoil the application. So how I secure the class files
    from the external access.

    thanks for ur time.

  2. #2
    Kent Guest

    Re: How i deploy Java application securly


    Hi Anvar,

    You can use a signed JAR file. This is a JAR file that is specially signed
    and "sealed". Any changes to content within the JAR file without resigning
    render the JAR useless. You need to use the JDK tool called jarsigner to
    achieve this (see JDK security tool documentation for more info).

    I've never used this myself but I think it is what you're after. However,
    and maybe someone else can answer this, is it not possible to unzip the files,
    make changes and then modify the classpath the Java app is running against?

    Regards,
    Kent

    "anvar" <anvar_k@angelfire.com> wrote:
    >
    >hi everybody,
    >I hope any one of u can help me. Because this is my last resort.
    >My problem is describing below.
    >I have created a java application(Stand alone). I have to install that into
    >a machine. When I am installing any how i have to copy all .class files

    to
    >the system. When I am copying, how will I secure those files. Means if a
    >person knows where the class files is loaded, he can declompile the application,
    >that will gives the original source code, and he can make changes into that
    >and recopy. This will spoil the application. So how I secure the class files
    >from the external access.
    >
    >thanks for ur time.



  3. #3
    MarkN Guest

    Re: How i deploy Java application securly


    You need an obfuscator. Not sure of any free ones. One for sale is Dash
    O
    (www.preemptive.com)

    The answer to Kent's question is yes, if you have/can get the source.

    Mark


    "Kent" <kb@essential.com.au> wrote:
    >
    >Hi Anvar,
    >
    >You can use a signed JAR file. This is a JAR file that is specially signed
    >and "sealed". Any changes to content within the JAR file without resigning
    >render the JAR useless. You need to use the JDK tool called jarsigner to
    >achieve this (see JDK security tool documentation for more info).
    >
    >I've never used this myself but I think it is what you're after. However,
    >and maybe someone else can answer this, is it not possible to unzip the

    files,
    >make changes and then modify the classpath the Java app is running against?
    >
    >Regards,
    >Kent
    >
    >"anvar" <anvar_k@angelfire.com> wrote:
    >>
    >>hi everybody,
    >>I hope any one of u can help me. Because this is my last resort.
    >>My problem is describing below.
    >>I have created a java application(Stand alone). I have to install that

    into
    >>a machine. When I am installing any how i have to copy all .class files

    >to
    >>the system. When I am copying, how will I secure those files. Means if

    a
    >>person knows where the class files is loaded, he can declompile the application,
    >>that will gives the original source code, and he can make changes into

    that
    >>and recopy. This will spoil the application. So how I secure the class

    files
    >>from the external access.
    >>
    >>thanks for ur time.

    >



  4. #4
    Dave Guest

    Re: How i deploy Java application securly


    "MarkN" <mnuttall@nospam.com> wrote:
    >
    >You need an obfuscator. Not sure of any free ones. One for sale is Dash
    >O
    >(www.preemptive.com)
    >
    >The answer to Kent's question is yes, if you have/can get the source.
    >
    >Mark
    >
    >
    >"Kent" <kb@essential.com.au> wrote:
    >>
    >>Hi Anvar,
    >>
    >>You can use a signed JAR file. This is a JAR file that is specially signed
    >>and "sealed". Any changes to content within the JAR file without resigning
    >>render the JAR useless. You need to use the JDK tool called jarsigner to
    >>achieve this (see JDK security tool documentation for more info).
    >>
    >>I've never used this myself but I think it is what you're after. However,
    >>and maybe someone else can answer this, is it not possible to unzip the

    >files,
    >>make changes and then modify the classpath the Java app is running against?
    >>
    >>Regards,
    >>Kent
    >>
    >>"anvar" <anvar_k@angelfire.com> wrote:
    >>>
    >>>hi everybody,
    >>>I hope any one of u can help me. Because this is my last resort.
    >>>My problem is describing below.
    >>>I have created a java application(Stand alone). I have to install that

    >into
    >>>a machine. When I am installing any how i have to copy all .class files

    >>to
    >>>the system. When I am copying, how will I secure those files. Means if

    >a
    >>>person knows where the class files is loaded, he can declompile the application,
    >>>that will gives the original source code, and he can make changes into

    >that
    >>>and recopy. This will spoil the application. So how I secure the class

    >files
    >>>from the external access.
    >>>
    >>>thanks for ur time.

    >>

    >


    There are a number of obfuscator tools around, a keyword search on the web
    will turn them up. We've recently looked at a number of them, and are now
    working with one called KlassMaster....

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
HTML5 Development Center
 
 
FAQ
Latest Articles
Java
.NET
XML
Database
Enterprise
Questions? Contact us.
C++
Web Development
Wireless
Latest Tips
Open Source


   Development Centers

   -- Android Development Center
   -- Cloud Development Project Center
   -- HTML5 Development Center
   -- Windows Mobile Development Center