保护 Java 类文件不被提取时 Jar2Exe 如何工作 [英] How does the Jar2Exe works when Protecting Java Class files from being extracted

问题描述

我想保护我的文件不被提取和我的代码被黑.我在 SO 上看到了两个类似的问题

I want to protect my files from being extracted and my code get hacked. I saw two similar questions on SO

http://stackoverflow.com/questions/9633455/how-to-protect-a-jar-file-from-being-decompiled
http://stackoverflow.com/questions/7622419/protect-jar-file-source-code-with-exe-file-java

但这些问题的答案最终会使用 ProGaurd.虽然 ProGaurd 本身声明它只会尽力混淆代码，并且不能保证代码 100% 保持安全.

but these question's answers end up with using ProGaurd. While ProGaurd itself state that it will just try its best to obfuscate the code and doesn't guarantee 100% that the code will remain secure.

但是有一些软件可以转换 Jar2Exe @ http://www.jar2exe.com/ 保证代码将保持 100% 安全.除了 JarProtector @ http://www.bfa-it.com/?lang=en&id=products/jarprotector

But there are softwares which convert Jar2Exe @ http://www.jar2exe.com/ which guarantees that the code will remain 100% secure. Besides JarProtector @ http://www.bfa-it.com/?lang=en&id=products/jarprotector

如果有人保证我们的类文件将保持安全，那么这意味着肯定有出路，但他们将使用什么技术来保护我们的类文件.我知道您只能猜测，但在我们将 Life-Efforted 应用程序交给客户之前，您最能猜到什么，以便我们可以保护我们的应用程序?

If someone is guaranteeing that our class files will remain secure then that means there is surely a way out but what is that technique they would be using to protect our Class files. I know that you can only guess but what would you best guess so we can protect our applications before we hand our Life-Efforted application to clients?

推荐答案

首先:没有100% 安全"这样的东西.

First of all : there is no such thing as "100% secure".

现在:所有这些应用程序都只是将您的 jarfile 包装成机器代码，实际上它们只是将其封装起来.也许其中一些还以某种方式混淆了 jarfile，但问题只是被推迟了:一旦攻击者摆脱了封装，您的 java 代码将是可见的、可读的.

Now : all of these apps simply wrap your jarfiles into machine-code, in fact they simply encapsulate it. Maybe some of them also obfuscate the jarfile in some way but the problem is only postponed : once an attacker gets rid of the encapsulation your java-code will be visible, readable.

封装 jarfile 是...根本没有安全性，如果您是一个熟练的破解者，很容易在机器代码中发现您的 jarfile.混淆你的 java 代码并封装它，另一方面可能会给你一些安全性，因为混淆可能真的很复杂.

Encapsulating jarfiles is ... no security at all, its quite easy to spot your jarfile inside of the machine-code if you're a skilled cracker. Obfuscating your java-code AND encapsulating it, on the other hand may very well grant you SOME security since obfuscation can be really complicated to crack.

请放心:永远不可能使您的应用程序安全"，地球上的每个人都只能采取几个步骤来使其更难破解.

Rest assured : it was never possible to make your application "secure", everyone on the planet can only take a few steps to make it harder to crack it.

这篇关于保护 Java 类文件不被提取时 Jar2Exe 如何工作的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！