Physical security

[pyhcheung]

Hey guys, not too sure if I should be posting in this section but here goes.

I have a problem about security. Software is being developed for my business, kind of like an interactive website which is run from one PC. However, at times I won't be physically there to keep an eye in things, and I will leave this program in the hands of someone else.

My concern is this, how do I protect this software from being copied onto CD, flash disk, by email attachment etc... Obviously I want the program to stay put and not be copied at all since its my investment.

Here are some of my thoughts so far:

1. Data encryption - tried it for a while but once I've encrypted the software then I couldn't use the program

2. The OS I'm using is XP pro - can I use this to create a guest account and restrict the programs from being copied to external means

3. Use software to lock all drives - I dont know if there is a program to do this but if anyone can point me in the right direction then thats great!

4. Physically make the CD drive a normal non recordable drive, lock up the USB ports, restrict access to the internet ... etc.. this is not really an option because it is messy

Well thats it so far, if anyone has any suggestions then thanks


:)

[doctorgonzo]

That's a tricky one. What I think I would do is put the application on a computer that does not physically have these drives: no floppy, no CD burner, no USB ports. The no floppy and no CD burner should be easy, and you should be able to disable USB ports in the BIOS and then put a BIOS password on to keep them from being enabled again. Preferably, this computer would also be standalone, not connected to any network.

The problem is that if you have the ability to run the program, you obviously have the ability to copy the bits, and there is no way around it.

[pyhcheung]

Thanks for your reply Doc, yes I could phyiscally remove all the places which can copy externally. The only problem with this is that I need to use at least one USB port for the program, I have no option about this. Actually now looking at physical locks for the USB that can open and close with a key. No luck so far but if I was an entrepeneur I would be making millions by now

[ghost2003]

Check if your BIOS has a pasword to start your computer. If you can get a case that had a key lock over all your drives, power button, etc...
Maximum PC had a review on Steganos Security Suite Generation 6. You could save it in a encrypted section of the drive or even hide it inside a picture!

www.steganos.com

[pyhcheung]

No go with the steg program. I can ecrypt the software no problems but I couldn't use it at the same time. I can't find anything else out there so I guess I'm going to remove all the copyable drives adn since i need to use a USB port, make some kind of lock that will keep the connection plugged in.

[glc]

Disable the parallel and serial ports too, laplink cables still work........

[ghost2003]

get a big dog and attach it to your computer :D