Protecting Node.js-based JavaScript Applications
Download as PPTX, PDF0 likes92 views
The document discusses the AxProtector JavaScript tool by Wibu-Systems, designed for protecting Node.js-based applications. It highlights the tool's integration features, modular licensing options, and strong security measures for safeguarding intellectual property in JavaScript applications. Key aspects include support for various platforms and a focus on improving developer experience while increasing application security.
Protecting Node.js-based JavaScript Applications
- 1. Matthias Honka Product Manager CodeMeter Axel Engelmann Architect Protection Technologies Protecting JavaScript Applications 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 1
- 2. Where to find the accompanying audio To access the on-demand reply of this masterclass, please visit www.wibu.com/resources/webinars/2021/protecting-node-based-javascript- applications/access 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 2
- 3. Delivery to the user Integration into processes Integrate Once – Deliver Many… 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 3 Integration into software Software Software CodeMeter Protection Suite Integrate Once Deliver Many ERP / CRM E-commerce CodeMeter License Central Software License Portal CodeMeter License Central
- 4. CodeMeter Licensing System 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 4 CmCloudContainer License container in the WIBU cloud Bound to a user CmDongle License container in a secure hw element Bound to a smart card chip License Server License Server in LAN / WAN CmActLicense License container in an encrypted file Bound to an endpoint
- 5. Protection and Licensing – 2 Sides of one Medal 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 5
- 6. Additional Options Automatically realizing different license models with AxProtector Single User Licenses Floating Network Licenses Subscription Licenses 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 6
- 7. AxProtector JavaScript 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 7
- 8. Electron applications – Naïve approach Electron is a popular framework for desktop apps VSCode, WhatsApp, MS Teams, Twitch, … Code mainly written in JavaScript Application distrubuted as a native executable package Goal: protection and licensing of intellectual property Naïve approach using AxProtector Native 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 8
- 9. Demo Demo 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 9
- 10. Electron applications – The pithole Electron.exe is a generic runner Actual application source is located in subdirectories Plain JS Code -> no protection Protected Electron.exe can be exchanged with an unprotected one Removal of the licensing component 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 10
- 11. The better approach AxProtector JavaScript 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 11
- 12. JavaScript 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 12 Delivery as JavaScript (text) file No copy protection, no IP protection Source code available to users, competitors, … function hello(a) { console.log("hello world " + a); } hello(1337)
- 13. const __axe_data="EAAAAAAACgAQAAQACAAMAAoAAA.... " ... ,__axe_getContext(),hello(1337); JavaScript AxProtector JavaScript 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 13 Every function is encrypted separately Highest Security Application is still platform independent CodeMeter Runtime / Protection Suite Runtime needed (Windows, Linux, macOS) function hello(a) { console.log("hello world " + a); } hello(1337)
- 14. Demo Demo 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 14
- 15. Demo Encryption of a simple application How to protect global functions Moving them into a new function Modular Licensing Error handling via exceptions IP Protection Requirements (License, CPSRT, …) 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 15
- 16. Summary AxProtector JavaScript 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 16
- 17. Summary The new AxProtector JavaScript offers highest security Simplified integration for software developers Easy and strong implementation of modular licenses The principles AxProtector JavaScript relies on are similar to those of AxProtector Python 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 17
- 18. Supported Platforms (CPSRT) 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 18 AxProtector JavaScript Target Platforms Windows macOS Linux Android x86 x86_64 x86_64 arm64 x86 x86_64 armhf AARCH64 arm MIPS armv7 arm64 GLIBC musl GLIBC musl GLIBC musl GLIBC musl DevKit available on Platform ✔ ✔ ✔ ✔ ✔ x x x x x Automatic Protection ✔ ✔ ✔ (*) ✔ ✔ (✔) (✔) (✔) (✔) (✔) CmCloudContainer ✔ ✔ ✔ ✔ ✔ CmActLicense ✔ ✔ ✔ ✔ ✔ CmDongle ✔ ✔ ✔ ✔ ✔ Protection on function level ✔ ✔ ✔ ✔ ✔ Integrity Protection ✔ ✔ ✔ ✔ ✔ Anti-Debug Methods ✔ ✔ ✔ ✔ ✔ Automatic License Checks ✔ ✔ ✔ ✔ ✔ Modular Licensing add-on add-on add-on add-on add-on (✔) (✔) (✔) (✔) (✔) IP Protection Modus add-on add-on add-on add-on add-on (✔) (✔) (✔) (✔) (✔) Code Moving add-on add-on add-on add-on add-on (✔) (✔) (✔) (✔) (✔) File Encryption add-on add-on add-on add-on add-on (✔) (✔) (✔) (✔) (✔) (*) Under Development (✔) Release 2021-12-11
- 19. CodeMeter Protection Suite CmDongle CmActLicense CmCloudContainer Integrity Protection Code Moving CodeMeter Protection Suite 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 19 Automatic License Checks Protection on function level Automatic Protection Anti-Debug Methods IxProtector (Individual Checks) IP Protection Modus Native Code (PC, IPC) Included AxProtector Windows AxProtector macOS AxProtector Linux Scripting Languages Intermediate Code AxProtector Java . AxProtector .NET / .NET Standard AxProtector JavaScript / TypeScript AxProtector Python Optional Included Included Included Included Included Included Included Optional Optional Included Optional Included Included Included Included Included Included Included Optional Optional Included Optional Included Included Included Included Included Included Included Optional Optional Included Optional Included Included Included Included Included Included Included Optional Optional Included Optional Included Included Included Included Included Included Included Optional Optional Included Optional Included Included Included Included Included Included Included Optional Optional Included Optional Included Included Included Included Included Included Included Optional Optional
- 20. Ordering AxProtector JavaScript 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 20 P/N Name 1336-1800-Y AxProtector JavaScript – 1 Year 1336-1801-Y AxProtector JavaScript - Modular Licensing – 1 Year 1336-1802-Y AxProtector JavaScript - IP Protection – 1 Year 1336-1803-Y AxProtector JavaScript – CodeMoving – 1 Year 1336-1804-Y AxProtector JavaScript – File Encryption – 1 Year Test Licences 1336-1800-T60 AxProtector JavaScript – 60-day Test Version 1336-1801-T60 AxProtector JavaScript - Modular Licensing – 60-day Test Version 1336-1802-T60 AxProtector JavaScript - IP Protection – 60-day Test Version
- 21. Outlook AxProtector JavaScript 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 21
- 22. Outlook Protection of JavaScript in Browsers JavaScript Core API 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 22
- 23. https://www.wibu.com info@wibu.com Europe: +49-721-931720 USA: +1-425-7756900 China: +86-21-55661790 Japan: +81-3-43608205 Thank you very much for your attention 2021-11-24 © WIBU-SYSTEMS AG 2021 - Protecting Node.js-based JavaScript Applications 23