M
M
Mercury132019-05-27 13:01:15
Windows
Mercury13, 2019-05-27 13:01:15

How to ensure security in the "64-bit program + 32-bit COM proxy" combination?

There is a 64-bit program that communicates with a 32-bit accounting system via COM. In order for this to somehow work, we made a "proxy" - a 32-bit program that, through a regular console in XML format, transmits data to a 64-bit "mother". The accounting system checks which program it is contacting, but, of course, it sees a proxy, not a mother.
Theoretically, such a data leak is possible: the malware launches a proxy and pulls data as much as you like. What sysadmin and programmer measures are best taken against such a case?
So far, the only defense against this is the “elusive Joe.” Switching to 64-bit COM is impossible - the developers of the accounting system simply did not provide a COM server.

Answer the question

In order to leave comments, you need to log in

3 answer(s)
M
Mercury13, 2020-08-13
@Mercury13

Again I have to answer myself.
Win32: Who called the program?

A
Artem @Jump, 2019-05-27
curated by the

Theoretically, such a data leak is possible: the malware launches a proxy and pulls data as much as it pleases. What sysadmin and programmer measures are best taken against such a case?
Theoretically, data leakage is always possible.
No one knows how critical this is for you and whether you need to take measures at all, and what kind of measures you need to take.

N
NewDevLab, 2019-05-27
@NewDevLab

Make the interaction through Pipe.
Set up an ACL for pipe.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question