Icon View Thread

The following is the text of the current message along with any replies.
Messages 1 to 2 of 2 total
Thread Engine Signature Question
Thu, Mar 4 2010 9:26 AMPermanent Link

Shane McCall

How effective is an engine signature from keeping outside applications
from reading or writing to the application data using a licensed version
of DBISAM. Can somebody just buy the source code and bypass the engine
signature check?

Aside from encryption does DBISAM have any way to prevent third parties
from direct writing to the database and bypassing our code level
business rules layer and our application level user access controls and
security?

Thanks

Sean
Thu, Mar 4 2010 1:24 PMPermanent Link

Tim Young [Elevate Software]

Elevate Software, Inc.

Avatar

Email timyoung@elevatesoft.com

Sean,

<< How effective is an engine signature from keeping outside applications
from reading or writing to the application data using a licensed version of
DBISAM. Can somebody just buy the source code and bypass the engine
signature check? >>

Sure, that's possible.  Once someone has the source code and physical access
to your data, the sky's the limit.

<< Aside from encryption does DBISAM have any way to prevent third parties
from direct writing to the database and bypassing our code level business
rules layer and our application level user access controls and security? >>

Just the signature, or using the DBISAM Database Server where the database
is on a server that only the database server process has access to, and no
one has physical access to.

--
Tim Young
Elevate Software
www.elevatesoft.com

Image