Alternates to consider
Raj Jamadagni, February 24, 2017 - 1:57 pm UTC
You may want to check
http://www.petefinnigan.com/products/pfclobfuscate.htm he proposes as a secured alternative. I have no experience with that tool, but you can take a look.
Alternatively you can do what Oracle seems to be doing lately, write your code in pro*C, expose as libraries and call those procedures using pl/sql packages. Similar approach may exist for java as well.
You just need to evaluate what is feasible for you.
February 25, 2017 - 1:10 am UTC
nice input.
So is there no way to secure code
Mohammed Imran Pasha, February 27, 2017 - 6:42 am UTC
Hi ,
It seems like there is no solution or utility provided by oracle to secure code.
Oracle is such widely used DB then is it so difficult to wrap or secure code?
My team is in discussions to take services of 3rd party which will provide their utilities to secure code but this service will cost us some $$$, My question again is why cannot oracle provide us with such flexibility?
Thanks,
Imran.
February 27, 2017 - 3:45 pm UTC
Well if you want to actually secure your code, you need to encrypt it. Which means you need to have secure methods for generating and storing keys. This adds a lot of complexity.
And if the database is on a customer site, they've got access to ciphertext. So they could attempt to decrypt it if they wanted to.
If you're really concerned about this, don't install at the customer's site! Instead, find a way to provide trials over the web. That way the database is hidden from them, making this discussion moot.