I have a new set up for software development for iOS devices. I am using MACs for the development and the company may grow from three employees right now to 20 in near future. I want to make the MACs secure so that the client code is safe and does not leave office.
Few ways I can think of a notorious employee trying to do that is
- Get it on USB-key/External-Disk
- Burn it on CD/DVD
- Transfer it to a bluetooth device
- Transfer it to Infra-Red Device
- Email it as an attachment
- Upload it to Dropbox or any such service
- FTP to a remote server
To handle this one by one I need to do following
- Disable USB access to user accounts (only admin allowed to insert a new device). But often times we need to stick in iphone/ipod touch to do on-device testing. How can I restrict the devices or get notified when someone tried to put a foreign device in any of the USB slots?
- Disable CD/DVD write functions except for admin. Can I do this?
- Disable bluetooth access. And if someone tries to pair a device, can I get notified or maitain a log?
- Wireless keyboard and mouse use Infra-Red (IR) technology. How can I limit these devices?
- Need to block all outgoing emails except company emails. Can I keep a tab on all outgoing traffic (may be by file size) so that I know some one is trying to up-load a file?
- Again disable access to such website. But then every 15 days a new service springs up. How do I tackle this?
- Disable ftp outgoing services. Can I do this?
Importantly is there a monitoring software that will allow me to do this? I don’t mind paying. But since this is a start-up I cannot spend a fortune on this. And of-course I prefer open source solutions for the control it gives me to extend and scratch my specialized itch 🙂
Finally I hope I wont be judged as a bad boss or something. I am all for developer freedom but we are into consulting business and protecting client code takes priority.
Thanks for your time and looking forward to your help.
Dev.
If you don’t trust your developer not to run off with your source code, don’t hire them. They can find a way around your “solution”
If you can’t trust any developers to not steal your source code, work alone. Anything known by two people is no longer a secret.