473,718 Members | 2,099 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

How to protect when going from Internet to intranet?

I have a web application developed in ASP.NET 2.0 with SQL Server 2005.
The application is on a hosted server accessible from Internet.

I have a potential customer who insists on having the application
hosted on their own web server and SQL Server and I'm very worried
about someone stealing the application or database. I'm not so worried
about their own people doing this, but I know that other
suppliers/consultants have access to the servers and I don't trust
them.

What kind of necessary security steps should I think of if an intranet
solution should be acceptable for me?

Regards,

S

Oct 27 '06 #1
1 1323
You first have to question whether turning down their request would be an
option, or if they are prepared to host it on a machine you are responsible
for and can access and manage remotely, removing any potential access from
competitors. What can you do via agreement that the app wont be accessible
to other consultants, and how would you/they enforoce that to assure you?

If you are up against a wall then you should probably start by looking at
how you compile your application into a single assembly, so even if it was
stolen there would be a fair bit of work to try and get access to any code.
West Wind have written a nippy little front end to the asp.net compiler to
make the job easier.
http://www.west-wind.com/tools/aspnetcompiler.asp. Also, consider
watermarking your code, so a hidden method can be called to show that its
your code if you think its been deployed elsewhere.

--
--
Regards

John Timney (MVP)
VISIT MY WEBSITE:
http://www.johntimney.com
http://www.johntimney.com/blog
<st****@gmail.c omwrote in message
news:11******** **************@ h48g2000cwc.goo glegroups.com.. .
>I have a web application developed in ASP.NET 2.0 with SQL Server 2005.
The application is on a hosted server accessible from Internet.

I have a potential customer who insists on having the application
hosted on their own web server and SQL Server and I'm very worried
about someone stealing the application or database. I'm not so worried
about their own people doing this, but I know that other
suppliers/consultants have access to the servers and I don't trust
them.

What kind of necessary security steps should I think of if an intranet
solution should be acceptable for me?

Regards,

S

Oct 27 '06 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
2356
by: Flier_75 | last post by:
Hi, I just password-protected an intranet site by including a password authentication script in each page of a private section. The script checks the login against the mySQL database. Appropriate file permissions have been set up on the private directory. My concern is now about protecting the Mysql password. Let's assume I use Apache to protect the access to this password (<files></files> or SetEnv in httpd.conf).
1
6988
by: McKirahan | last post by:
What is "active content"? My ASP page just returns HTML.... I have a page with an .htm extension that has a form whose action is an ASP page which generates a report after updating a database with the form data. Under Windowx XP SP2 the IE6 "Information Bar" has the message: "To help protect your security, Internet Explorer has restricted this
11
3642
by: Dave | last post by:
I have this sample HTML code: <html> <head> <script type="text/javascript"> var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1"); </script> </head>
0
1097
by: Sepia | last post by:
Hi, I am totally new in learning c sharp language. I have made an intranet web site with ASP. I want to make a window that has my name on the title bar and works like an internet explorer without having address bar, internet explorer icons and menus. The window should call my intranet web site default page into it and should work like internet explorer do. I want to install this small window program to all the computers in the network,...
5
1258
by: asdf | last post by:
Hi, Currently, I have one database for Intranet clients on the server behind the firewall. But I was asked to allow the extranet users to access the same data. From the security perspective what is the best way to make that data accessible. Should we have two databases one for Intranet and one for Extranet? In that case the second one would be a replica but that would cost us money for the extra MS SQL license. Maybe it is OK to have...
22
5810
by: teejayem | last post by:
Hi, I am new to programming with databases and was wanting some help. Is there any way to password protect an access database and access sent sql commands to it via vb.net code? Any help would be much appreciated. Thanks in advanced.
2
1972
by: =?Utf-8?B?Sm9zZXBo?= | last post by:
I am building an ASP.Net 2.0 application that will be accessible through both internet and intranet. The application will use two different types of security methods, depending on whether the application is being accessed through internet or intranet. I am trying to figure out how to write the code necessary to have the application make the determination and thereby use the appropriate security method. Does anyone have any ideas or...
8
4016
by: msnews.microsoft.com | last post by:
Our IT team relocated our application servers yesterday. They had to take one machine out of the cluster because it would prompt users for credentials if accessed using the IP address, which I guess is what happens when it is accessed through the firewall. However, it works as expected when I use the machine name in place of the IP address. To summarize, the application servers were moved to a new hosting site and one machine is...
3
2622
by: RogerTM | last post by:
Hi, i´m using Window 2003 server, a wireless LAN, and 75 users, all of them need internet, so troughout a proxy i give the internet access to all of them but i need to all my users go to the intranet first to see the new and posts. is there any way to do this?, the user opens the browser, they got into the intranet first and after that they push a button or a comand embeded into the intranet grants them access to the web, whitout returning to...
0
8827
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8724
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
9053
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
7991
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
6654
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5971
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4743
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
3182
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
2559
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.