Securing the code
Dear all
I have this web application that has an applet and buch of java script. They all have the core functionality of the project. When i have the stuff on the web i can secure the content by configuring the server. But few clients would like the product on a cd. That is a problem for the security of my code because they can see it and reuse it. Is there any way to protect the code (applet and javascript) so the customer can use it but not be able to view it? Something like encryption? Any advice on that matter?
Sincerely
> I have this web application that has an applet and
> buch of java script. They all have the core
> functionality of the project. When i have the stuff
> on the web i can secure the content by configuring
> the server. But few clients would like the product on
> a cd. That is a problem for the security of my code
> because they can see it and reuse it. Is there any
> way to protect the code (applet and javascript) so
> the customer can use it but not be able to view it?
> Something like encryption? Any advice on that
> matter?
>
You can make it difficult for the client to see your code but you can't stop him. If you encrypt any part of you program (class files or data) then within your program you must have the ability to decrypt the encrypted part. The client can view your code and work out the parameters and methods of the encryption or he can just modify tthe code so that it prints out the data.
remember tht, "Nothing is Secure" given time and money.u can just make sure tht, "he will loose more than what he gets".Web is intrinsically insecure and so is "Web code".I would think of "3 tier arch." if u want to preserve ur "business logic" .
yup i am using the 3-tier approach .
The worry factor i had is when i send a copy of a cd to a client that has all the information on the cd. Then it is a problem as all the code is contained on the cd. But what i think the solution can be to just place a some sort of policy document compiled from the lawyers in our company. So in case someone gets our code and tries to make a product of their own then we can easily take that to court.
