| |
ADOBE FLASH SECURITY - ENCRYPT SWF FILES
FILE TYPES AND SIZE SUPPORTED - SWF
- Maximum single file size that can be protected is 300MB
OPERATING SYSTEMS SUPPORTED - Windows 2000
- Windows 2003
- Windows XP
- Windows Vista
- Windows 7
SECURE FLASH PLAYER REQUIREMENTS - Adobe Flash player version 10 or above
This must be installed to view secure flash files - download the latest flash player from Adobe's web site here - Adobe Flash Player
SERVER REQUIREMENTS (FOR OWN SERVER HOSTING) The Flashguard Flash Security administration system can be installed on either a Linux, Unix, or Windows 2003 server.
Linux Server running Red Hat, Suse, or Fedora with Apache, and MySQL 4.1 or above.
Unix Server running FreeBSD with Apache, and MySQL 4.1 or above.
Windows 2003 Server or above with MySQL 4.1 or above and SendMail or a similar program for sending emails installed (e.g. MS Exchange).
Intel Celeron 2.0 GHz or higher, 512 MB DDR RAM, 40 GB IDE hard drive (minimum spec).
The server must be capable of having Java JDK and Apache TomCat installed on it.
Supported versions are:
- JDK version 1.5 and above
- Apache Tomcat 5.0.28 and above
- MySQL 4.1 and above
Full root access is required.
A Domain name must be assigned to the server.
FLASH SECURITY WITH DRM CONTROLS
Flashguard Flash Security ensures the best security for your flash files. Your secure flash files are locked to individual computers and cannot be shared.
Unlike weak and unmanageable password mechanisms Flashguard Flash Security uses public key technology with strong AES 256 bit encryption, DRM (digital rights management) controls, and a real-time web based licensing system. There are no passwords to send, enter, manage, forget, or pass onto others.
You secure flash files on your own computer. The source (unsecured) files are never exposed to a web server where they could be easily compromized. We never have access to either your original flash files or your secure flash files.
SWF FLASH ENCRYPTION SWF files are encrypted using the FIPS approved algorithm, AES at its strongest strength, 256 bit. For more information on the AES alogrithm and how it is used to encrypt SWF files see FIPS-197.
PUBLIC KEY TECHNOLOGY We use strong public key technology rather than weak password mechanisms that are easily crackable. Since there are no passwords to enter the system is not vulnerable to password attacks. Decryption keys are transparently relayed to the client computer and stored in encrypted format. There are no passwords to enter, manage, compromise, forget or pass on to others.
All communication between the client and the server is encrypted in order to prevent an attacker from being able to observe the secure exchanges between the client and the administration system. Where key material is being exchanged it is encrypted prior to being sent using a DH exchange at 2048 bits. This avoids the possibility of theoretical attacks where the attacker may observe in excess of 1.5 million messages.
KEY MANAGEMENTWhilst we use public key technology, no key management is required by you as the publisher or by your users or customers, as it is all handled transparently by the licensing system. There are no certificates to revoke when you want to terminate a customers access or any other PKI complexity.
SECURE FLASH PLAYER
Flashguard Flash Security uses its own decryption application, a Secure Flash Player, rather than relying on a plug-in to present your protected flash content. Secure flash files are decrypted in the Secure Flash Player which applies the necessary DRM controls and ensures your content cannot be compromised by other applications, browser flaws, bugs, or the common Adobe flash security issues.
Secure flash files are decrypted on-the-fly in memory. They are never saved to disk in temporary format or to the Windows swap file. We do not create extra files on disk that can be copied to another computer along with the secure files so they can be easily shared and viewed. See also our DRM Technology on how the licensing system prevents your customers sharing their registration information and Flash Security Features in Depth.
Your security is not compromised by plug-in failures or conflicts. In fact, we think that plug-ins are potentially so insecure that we prevent them from loading so they can't compromise flash player security.
JavaScript is not supported to prevent malicious code execution - see Adobe flash security issues.
To stop your secure flash files being readily stolen whilst displayed on screen, the use of Windows print screen and screen grabber applications are prevented whilst the Secure Flash Player is running.
| |
| |
