Encryption (Code and database) & App protection

Sergej

Hi!

Share please your experience on security.

1) I am seeing on some sites that their source code is unreadable. I am not programmer. How could the same be achieved for AwareIM? Something like Zend?

2) Do you encrypt your databases in business apps? What is the best experience? TrueCrypt? Will it protect it from stealing by system administrator?

3) How do you protect your app from being stolen by constructors when you involve for example freelance or requited programmers?

P.S. In our county law is not working 🙂

BobK

2) Do you encrypt your databases in business apps? What is the best experience? TrueCrypt? Will it protect it from stealing by system administrator?

Aware has data encryption out of the box. I don't use it now, but I did look into it about a year ago. It encrypts the date in the database so anyone accessing the database directly would see encrypted data. Any one accessing the data thru Aware would see the actual data because Aware automatically decrypts it before presenting it.

If your system administrator has full access to Aware, there is not much you can do to prevent him from stealing the code or data. Just be careful who you give Administrator access to.

Sergej

Thanks! Didnt know about this feature. Thought its only for passwords.

What about source code that displays in browser? If you want to hide that web app is running on AwareIM sourcecode encryption could help. I heart that for that purpose Zend is used but for PHP only.

I mean in source code there are some clues that it is awareim app. You will found out that if just type them in google:
aware_ext
aware.js
AwareApp.start

Or is it possible to rename them?