Summary

How does FNE validate that the DLLs / shared objects it loads against are genuine / haven't been interposed by some third party?

Question

How does FlexNet Embedded validate that the DLLs / shared objects it loads against are genuine / haven't been interposed by some third party?

Answer

The security measures in for the C XT kits are as follows:

1. The static library that the customer links into their code communicates with the DLL via an anti-spoof channel (take a look at the DLL and you will only see a couple of exported functions).
2. As of the upcoming release 2015.09, TRA will be used to protect the FlxCore dynamic library from tampering.
3. TRA could also be used by the publisher in their application to check the signatures of Microsoft libraries and FlxCore itself.