I would like to know if it is possible that a file checksum or MD5 Checksum is an option for identifying malicious embedded code. As an example, I have a development environment and I want to prevent somebody or an internal threat from injecting malicious code or something into an external dll and using it with the original dll name. So an developer saying, can during development call an external malicious dll and use it as the same name as the original dll?
That way altering the application's behaviour. Making it difficult to find out. I have done some research but digital signatures may help fix but not sure if all.
Please if there is any solution to this I will be very grateful.