As my knowledge about information security is not THAT good and Google did not give me a satisfactory answer I would like to ask the community here:
I am working for a company offering online services (as an ASP) where high-value target information of customers is stored (e.g. confidential documents of different companies). Access to the backend (source, database, and so on) of the application (root) server should be protected as good as possible. Now our host suggested to only allow certain static IP addresses as part of the authentication process, to make it more secure.
So my first question is: Is there a REAL security benefit in this measure OR not? (Beside the fact that it may be a bit harder for attackers to get into the backend as they must know of the measure itself and the required static IP Adresses, also think of IP Spoofing and high anonymous proxies)? If not, please give me a reasonable explanation as the stakeholders of my company want to force every programmer in the company to get a static IP address for their home internet connections ;-)
Second question: If there is a REAL security benefit in this, is there a real difference regarding security between getting a static IP address from my Internet Provider directly and renting a static IP from a service like http://dyndns.com/ or http://www.noip.com/ [as this is cheaper ;-)]?
@Edit: You cannot rent a static IP for this purposes from dyndns/noip, but from VPN service providers as e.g. strongvpn (http://strongvpn.name/static_ip.shtml).