Re: securing a web appliance

From: Blare Sutton (blare_at_stability.com.au)
Date: 03/05/04 

Date: Fri, 05 Mar 2004 07:02:25 GMT

You are pretty much correct there. If they are hosting the server, they've
got access to the complete ASP code. Get yourself a lawyer and start
drafting agreements. Alternatively, make your agreement restricted open
source, agreeing that they can view the source and even use it within their
organisation, but not share it or onsell it, and charge them more.

"Shailesh Humbad" <humbads1@hotmail.com> wrote in message
news:Odr0WCfAEHA.640@TK2MSFTNGP09.phx.gbl...
> An Windows 2000 server will be installed at a client site, and it will
> function as a web appliance with our software running in IIS. Is
> there any way to secure the ASP code files that are running on the server?
>
> I am under the impression that all bets are off when physical security
> to the machine is not possible. For example, even if I withold the
> administrator password from the client, if they were malicious, they
> could boot the computer from another hard drive and then recover
> access to the system and all its contents.
>
> Am I correct to assume that only legal agreements will serve as
> protection from copyright violations? If that is the case, then
> should I even bother 'locking down' the server to make it a tiny bit
> harder to access the code?
>
> Regards,
> Shailesh

Relevant Pages

  • ASP: Get user login ID
    ... But when we register the dll on our web ... server, and call it from our ASP code, it generates an error. ... Dim lngCharsReturned As Long ...
    (microsoft.public.inetserver.iis.security)
  • Re: IISState log (IIS slow)
    ... It doesn't matter if the file does not have any ASP code in it or not. ... former is handled directly by the IIS Static file handler, ... which under any sort of appreciable load means your server is ... reached its allowed processing time limit. ...
    (microsoft.public.inetserver.iis)
  • Re: 80004005 Unspecified Error
    ... I did not expect MVPs to argue over cute variable names ("cn" vs. ... connecting to Access databases from asp code. ... It worked just fine (I had to restart my win2000 server) TILL I ... >> I tried using a different connection string hoping it was the driver: ...
    (microsoft.public.inetserver.asp.db)
  • Re: IISState log (IIS slow)
    ... IIS processes pages normally without errors(only IIS Log sometimes throws ... AVG server load is 50-60% when IIS stops responding normally, ... comes to opening asp files(even sometimes without asp code in it/plain html). ... Same sql queries which I launch in asp, ...
    (microsoft.public.inetserver.iis)
  • Re: FP 2003 HowTo ASP pages?
    ... you have the option of adding asp code later without having to rename pages ... > - extra unnecessary calls to the server ... > |> I have tried creating a local empty web site under my ... > | that you *can* open and try publishing to a new web at ...
    (microsoft.public.frontpage.client)
Loading