Data Masking

Only available on StudyMode
  • Topic: Oracle Corporation, Oracle Database, Data element
  • Pages : 21 (4525 words )
  • Download(s) : 70
  • Published : April 17, 2013
Open Document
Text Preview
An Oracle White Paper
July 2010

Data Masking Best Practices

Oracle White Paper—Data Masking Best Practices

Executive Overview ........................................................................... 1 Introduction ....................................................................................... 1 The Challenges of Masking Data ....................................................... 2 Implementing Data Masking .............................................................. 2 Comprehensive Enterprise-wide Discovery of Sensitive Data ........ 3 Enforcing Referential Relationships during Data Masking .............. 4 Rich and Extensible Mask Library.................................................. 6 Sophisticated Masking Techniques ............................................... 7 High Performance Mask Execution ................................................ 9 Integrated Testing with Application Quality Management solutions11 Oracle’s Comprehensive Solutions for Database Security ........... 12 Customer Case Studies ................................................................... 12 Conclusion ...................................................................................... 13

Oracle White Paper—Data Masking Best Practices

Executive Overview
Enterprises need to share production data with various constituents while also protecting sensitive or personally identifiable aspects of the information. As the number of applications increases, more and more data gets shared, thus further increasing the risk of a data breach, where sensitive data gets exposed to unauthorized parties. Oracle Data Masking addresses this problem by irreversibly replacing the original sensitive data with realistic -looking scrubbed data that has same type and characteristics as the original sensitive data thus enabling organizations to share this information in compliance with information security policies and government regulations.

This paper describes the best practices for deploying Oracle Data Masking to protect sensitive information in Oracle and other heterogeneous databases such as IBM DB2, Microsoft SQLServer.

Introduction
Enterprises share data from their production applications with other users for a variety of business purposes. Most organizations copy production data into test and development environments to allow application developers to test application upgrades. Retail c ompanies share customer point-of-sale data with market researchers to analyze customer buying patterns. Pharmaceutical or healthcare organizations share patient data with medical researchers to assess the efficacy of clinical trials or medical treatments. Numerous industry studies on data privacy have concluded that almost all companies copy tens of millions of sensitive customer and consumer records to non-production environments for testing, development, and other uses. Very few companies do anything to protect this data even when sharing with outsourcers and third parties. Almost 1 out of 4 companies responded that live data used for development or testing had been lost or stolen and 50% s aid they had no way of knowing if data in non-production environments had been compromised.

1

Oracle White Paper—Data Masking Best Practices

The Challenges of Masking Data
Organizations have tried to address these issues with custom hand-crafted solutions or repurposed existing data manipulation tools within the enterprise to solve this problem of sharing sensitive information with non-production users. Take for example, the most common solution: database scripts. At first glance, an advantage of the database scripts approach would appear that they specifically address the unique privacy needs of a particular database that they were designed for. They may have even been tuned by the DBA to run at their fastest

Let’s look at the issues with this approach.
1.

Reusability: Because of the tight association between a script and the...
tracking img