473,795 Members | 2,418 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

How to protect when going from Internet to intranet?

I have a web application developed in ASP.NET 2.0 with SQL Server 2005.
The application is on a hosted server accessible from Internet.

I have a potential customer who insists on having the application
hosted on their own web server and SQL Server and I'm very worried
about someone stealing the application or database. I'm not so worried
about their own people doing this, but I know that other
suppliers/consultants have access to the servers and I don't trust
them.

What kind of necessary security steps should I think of if an intranet
solution should be acceptable for me?

Regards,

S

Oct 27 '06 #1
1 1327
You first have to question whether turning down their request would be an
option, or if they are prepared to host it on a machine you are responsible
for and can access and manage remotely, removing any potential access from
competitors. What can you do via agreement that the app wont be accessible
to other consultants, and how would you/they enforoce that to assure you?

If you are up against a wall then you should probably start by looking at
how you compile your application into a single assembly, so even if it was
stolen there would be a fair bit of work to try and get access to any code.
West Wind have written a nippy little front end to the asp.net compiler to
make the job easier.
http://www.west-wind.com/tools/aspnetcompiler.asp. Also, consider
watermarking your code, so a hidden method can be called to show that its
your code if you think its been deployed elsewhere.

--
--
Regards

John Timney (MVP)
VISIT MY WEBSITE:
http://www.johntimney.com
http://www.johntimney.com/blog
<st****@gmail.c omwrote in message
news:11******** **************@ h48g2000cwc.goo glegroups.com.. .
>I have a web application developed in ASP.NET 2.0 with SQL Server 2005.
The application is on a hosted server accessible from Internet.

I have a potential customer who insists on having the application
hosted on their own web server and SQL Server and I'm very worried
about someone stealing the application or database. I'm not so worried
about their own people doing this, but I know that other
suppliers/consultants have access to the servers and I don't trust
them.

What kind of necessary security steps should I think of if an intranet
solution should be acceptable for me?

Regards,

S

Oct 27 '06 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
2359
by: Flier_75 | last post by:
Hi, I just password-protected an intranet site by including a password authentication script in each page of a private section. The script checks the login against the mySQL database. Appropriate file permissions have been set up on the private directory. My concern is now about protecting the Mysql password. Let's assume I use Apache to protect the access to this password (<files></files> or SetEnv in httpd.conf).
1
6988
by: McKirahan | last post by:
What is "active content"? My ASP page just returns HTML.... I have a page with an .htm extension that has a form whose action is an ASP page which generates a report after updating a database with the form data. Under Windowx XP SP2 the IE6 "Information Bar" has the message: "To help protect your security, Internet Explorer has restricted this
11
3649
by: Dave | last post by:
I have this sample HTML code: <html> <head> <script type="text/javascript"> var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1"); </script> </head>
0
1099
by: Sepia | last post by:
Hi, I am totally new in learning c sharp language. I have made an intranet web site with ASP. I want to make a window that has my name on the title bar and works like an internet explorer without having address bar, internet explorer icons and menus. The window should call my intranet web site default page into it and should work like internet explorer do. I want to install this small window program to all the computers in the network,...
5
1262
by: asdf | last post by:
Hi, Currently, I have one database for Intranet clients on the server behind the firewall. But I was asked to allow the extranet users to access the same data. From the security perspective what is the best way to make that data accessible. Should we have two databases one for Intranet and one for Extranet? In that case the second one would be a replica but that would cost us money for the extra MS SQL license. Maybe it is OK to have...
22
5830
by: teejayem | last post by:
Hi, I am new to programming with databases and was wanting some help. Is there any way to password protect an access database and access sent sql commands to it via vb.net code? Any help would be much appreciated. Thanks in advanced.
2
1974
by: =?Utf-8?B?Sm9zZXBo?= | last post by:
I am building an ASP.Net 2.0 application that will be accessible through both internet and intranet. The application will use two different types of security methods, depending on whether the application is being accessed through internet or intranet. I am trying to figure out how to write the code necessary to have the application make the determination and thereby use the appropriate security method. Does anyone have any ideas or...
8
4017
by: msnews.microsoft.com | last post by:
Our IT team relocated our application servers yesterday. They had to take one machine out of the cluster because it would prompt users for credentials if accessed using the IP address, which I guess is what happens when it is accessed through the firewall. However, it works as expected when I use the machine name in place of the IP address. To summarize, the application servers were moved to a new hosting site and one machine is...
3
2625
by: RogerTM | last post by:
Hi, i´m using Window 2003 server, a wireless LAN, and 75 users, all of them need internet, so troughout a proxy i give the internet access to all of them but i need to all my users go to the intranet first to see the new and posts. is there any way to do this?, the user opens the browser, they got into the intranet first and after that they push a button or a comand embeded into the intranet grants them access to the web, whitout returning to...
0
9519
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10438
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10214
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
10164
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
10001
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
9042
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
7540
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5437
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
2
3727
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.