SafeNet, the world leader in data protection, has announced the introduction of the industry's first software protection solution using white-box security technology. SafeNet Holy Days software licensing and protection solutions now incorporate new capabilities to protect security algorithms from attack in a "white box" environment. Previously, attackers would normally observe and change the details of the operation of Dynamic source code and the internal algorithm in an arbitrary manner.
Traditionally, in software protection technology, security algorithms typically run under the attacker's nose. There is no black-box protection key, so the application can be monitored step-by-step, and all access to the data is visible. To better protect the key from damage, we need to take a different approach.
"Our white box solution assumes that the attacker has total visibility," said Michael Zunke, chief technology officer, SafeNet software monetization solution. It replaces the exposed algorithms and software protection keys with a dedicated application library to minimize the attack surface. This approach ensures that protected keys are kept hidden from hackers, and that they are not easy to rebuild during an attack. ”
With SafeNet's white-box solution, the communication between the protected application and the hardware lock is fully protected, ensuring that the data transmitted in the secure channel cannot be recorded and replayed. The traditional scheme hides the key, while the solution implemented by SafeNet is centered on the white box password, assuming the attacker can trace the protected application and execution environment and search for the data protection key. Based on this assumption, the algorithms and keys are replaced by proprietary APIs (application programming Interface) libraries that implement the same protections, but the embedded keys are used as part of the security algorithm and are not present in the storage area and therefore are not extracted. Each application library is created and confused for specific software vendor customers, making it impossible for general hacking activities to be implemented at all.
Zunke continued: "In the complexity of the current security risks, software vendors must pay special attention to the design and implementation phase of software protection, and throughout the product life cycle to continuously strengthen protection." SafeNet's software protection solution allows ISVs to easily integrate various security measures, such as white-box protection technology, directly at the source level, as part of the design, further strengthening the overall protection solution for software vendors. ”
White Box Protection Technology Webinar
To learn more about white-box protection, add the "Software Protection Best Practices: White box password" webinar that safenet software security expert Mark Horvath will participate in. During the meeting, Mark will explore how white box password works, and how this approach can provide a superior level of security compared to traditional secure channel communications.
