Define your target first, protect your source code? or protect your data?