Microsoft bundles a lightweight obfuscator in Visual Studio that it OEMs from PreEmptive Solutions. PreEmptive also offers a heavier-weight, corporate version. The obfuscator notifies a company when its software has been tampered with. According to Sebastian Holst, senior vice-president of PreEmptive, the tamper notification service is like a smoke detector in that it’s inexpensive and easy to use yet it could potentially help you avert catastrophe. The software is priced at $5,000 per build machine; a typical enterprise license is $25,000. Next week, PreEmptive will come out with a “thermostat”: dashboards and benchmarks that keep track of software performance and vulnerabilities.

Is this a vital area that Wall Street firms should be focusing on now? Not quite, according to Joseph Feiman, vice-president and Gartner Fellow. While he feels application security, particularly for web-based applications, is a very important issue for Wall Street this year (we'll be following up on this at a later date), he sees obfuscation as a small subset of the broader application security problem. “As long as companies’ software and their intellectual property stay within the premises, they’re safe,” he says. “Where obfuscation useful is where applications leave the enterprise.” So if a Wall Street firm shares its applications with partners or customers, then it might want to consider obfuscation, as should a company that doesn’t trust its own employees who use sensitive applications.