Does anybody know products which would protect driver from reverse engineering? I thought maybe i should use obfuscators which support kernel code? If yes, can you advice me something, rather free 🙂
Thanks!
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
The Windows Licence key driver and the drivers which support DRM in Windows are deliberately obfuscated.
Generally speaking though, obfuscation in kernel mode is a bad idea – bugs in kernel mode affect the security of the entire system, crash dumps are difficult to debug and obfuscated code necessarily runs slower than normal code, and slow-downs in ring0 slow down the whole machine.
Putting this together with the fact that drivers are already pretty hard to reverse engineer without some real expertise (i.e. someone who can reverse engineer your driver doesn’t want your IPR), the most likely thing you’ll be doing by obfuscating your driver is making it more difficult to build, use and maintain your product