Is there any way to hide the http requests a java application makes from wireshark or any other traffic monitoring processes on the machine?
possible to hide certain string data from being exposed via jvm monitor?
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
It depends. You can protect against simple packet sniffing by using SSL etc to secure the network connection; i.e. use HTTPS. However, if someone/something has maximum privileges on a typical machine, they can (in theory) get around any scheme you attempt to erect. For instance, they could get into the JVM and figure out what keys are being used to encrypt the SSL traffic.
Hiding the existence or the destination of the HTTP requests is impossible.
If someone can attach a Java debugger to your JVM, then can (in theory) see any data that it contains and observe anything that it does. There’s nothing you can do about that.
Reading between the lines, it seems like you are trying to implement some kind of secure communication channel between your server and a copy of your software running on a machine / platform that you can’t trust. Put simply, this is theoretically impossible. You are better off looking for a scheme where it doesn’t matter if someone can see the network traffic. (It is hard to advise without knowing what it is you are trying to do.)