Automating Xamarin Protection with Dotfuscator

May 10, 2017 4364 Views Joseph Sewell

This week, all eyes of the software community will be fixed on Microsoft's Build conference. Microsoft and its partners are set to announce new technologies and lay out their vision for the future of software development. Recent years have seen the narrative take a decidedly cross-platform approach. Visual Studio Code gives developers tools to create what they want no matter their OS of choice. .NET Core extends the reach of the popular .NET Framework to Mac and Linux. Finally, Xamarin, which was acquired by Microsoft in 2016, lets app developers write their app once, then publish it for Android, iOS, and Windows devices.

As a Visual Studio 2017 Premier Launch Partner, PreEmptive Solutions is pleased to announce, as part of Microsoft Build 2017, a new way to integrate Dotfuscator's protection into Xamarin apps. This new Dotfuscator-Xamarin integration has a number of advantages:

Easy setup - Developers just download an MSBuild targets file and import it into their projects with a few simple property changes. No more need to define custom targets or copy files as a post-build step!
Deep pipeline integration - The new integration automatically puts Dotfuscator into the Xamarin build pipeline, protecting apps as they're built in Visual Studio or MSBuild. Developers don't have to worry about forgetting the protection step, since it's now included as part of the build.
Incremental builds - Don't waste time reapplying Dotfuscator's protection when your project hasn't changed. The integration is smart enough to know when a build is necessary, and when it can be skipped.
Automatic configuration - Get up and running quickly: the integration creates a Dotfuscator config file automatically, with sensible defaults for the project. Instructions are provided for further configuration, including a case study of how to discover which additional identifiers (if any) need to be excluded from renaming obfuscation.
Detailed instructions - We've detailed how to use the integration with a well-known Xamarin.Forms sample. Developers can see the practical application of these instructions through an included git repo, which walks through the process step-by-step.
All major project types supported - The integration supports projects targeting Android, iOS, and Universal Windows (UWP).
Proven protection strategy - The app is protected by Dotfuscator, the industry standard .NET obfuscation and protection tool.
Free to start - The integration works not only with the commercial Dotfuscator Professional Edition, but also with Dotfuscator Community Edition (CE), which is included with Visual Studio. Developers can use the integration to quickly discover the capabilities of Dotfuscator's protection.

To get started, see Integrating Dotfuscator's Protection into Your Xamarin Apps in Visual Studio. There you can read the step-by-step instructions, as well as download the necessary MSBuild targets file.

We plan to keep introducing features like this, to make the protection process easier and more accurate, for Xamarin and all other kinds of apps. Stay up-to-date with the latest Dotfuscator features by visiting the Dotfuscator Downloads page. For announcements and other information, keep an eye on our blog and follow our Twitter account, @PreEmptive.

Free Trial

Request Quote

Request Demo

Announcing DashO v9.0

DashO v9.0 is out, and it has a new major version number for a very good reason: we've made some major improvements!

Java 9 and 10 support, including module support

In DashO v8.4, we introduced "provisional" Java 9 support, and we published an article describing our Java 9 roadmap. Java 9 support was provisional because there were cases where DashO would process a Java 9 app in a way that DashO thought was correct but would actually result in a broken app. As part of our commitment to the "principle of least surprise", we didn't want users to discover those issues by accident, so we made Java 9 support require an opt-in.

As of DashO 9, Java 9 (and 10) support is no longer provisional; it is a fully-supported feature, without an opt-in - and without surprises. There are a few edge cases, still, but those will generate build warnings or errors, as appropriate.

Now is the time to seriously look at how you are protecting and securing your applications

The U.S. National Institute of Standards and Technology (NIST) has published two data-security focused documents in as many months.

In June 2018, NIST published guidance on assessing requirements for securing unclassified information (NIST Special Publication 800-171A Assessing Security Requirements for Controlled Unclassified Information).

In July 2018, SPECIAL PUBLICATION 1800-1 Securing Electronic Health Records on Mobile Devices was published offering a practical guide to meeting the specialized security and privacy obligations that come with the management of health records on mobile devices.

JSON is a widely used format for sharing objects and data within an application. To protect .NET applications that serialize and deserialize JSON objects, you should be aware of some special considerations.

Consider a basic Employee class:

All apps are vulnerable. That’s the takeaway from a recent Trustwave report, which found that 100 percent of web applications could be compromised in a cyberattack. Combined with the uptick in mobile malware, account takeover fraud and blockchain-based attacks, companies spend most of their time fending off new attacks while trying to keep current apps up and running.

The result? It’s easy to assume that when applications aren’t directly under attack, they’re effectively safe. The truth? More code handling more data increases the risk of “leaky apps” — applications which unwittingly expose sensitive data to prying eyes.

Here’s how you plug the holes.

Anyone developing software applications today can easily feel overwhelmed by the persistent security threats their products face from application counterfeiting and malware injection to theft of services and confidential information. This article discusses some of ways hackers go about their dirty deeds and how to achieve a balanced perspective on application risk and risk management allowing you to release applications with greater confidence. Gaining this confidence requires a deeper knowledge of the risks and potential remedies.

Automating Xamarin Protection with Dotfuscator

Announcing DashO v9.0

Java 9 and 10 support, including module support

Latest NIST Publications Reinforce the Importance of Application Hardening in Securing Data

Now is the time to seriously look at how you are protecting and securing your applications

Protecting .NET applications that use JSON objects

"Leaky Apps” Are Draining Your Data — Here’s How You Plug the Hole

Five Evil Things a Hacker Does to Your App

Latest Blog Posts

Announcing DashO v9.0

Latest NIST Publications Reinforce the Importance of Application Hardening in Securing Data

Protecting .NET applications that use JSON objects

"Leaky Apps” Are Draining Your Data — Here’s How You Plug the Hole

Five Evil Things a Hacker Does to Your App

Latest News

Dotfuscator Adds Rooted Device Controls to Meet Exceptional Xamarin.Android Demand

Microsoft Build 2018

PreEmptive Solutions Launches GDPR Compliance Relief Program

Protecting Your Xamarin Apps with Dotfuscator

Third Major Dotfuscator Community Edition Release in 12 Months Expands Real-time Defense and Streamlines Xamarin Integration

Twitter

App Protection Blogs

Automating Xamarin Protection with Dotfuscator

Java 9 and 10 support, including module support

Now is the time to seriously look at how you are protecting and securing your applications

Latest Blog Posts

Latest News

Twitter