RE: removing/masking sensitive data

From: Rich Holland [oramail] <oramail_at_guidancetech.com>
Date: Wed, 20 Dec 2006 17:15:00 -0500
Message-ID: <001f01c72484$4bfcf320$05c90a0a@CABLOE21441>

I've done this with SAP systems in the past; SAP uses an internal numbering scheme rather than relying on SSN to be unique. This makes masking the information much easier than if it's used as a key in a home-grown application...

I had the HR department tell me what they consider sensitive and mask that in our Training & QA systems by overwriting the data (things like home addresses, wages, SSN's, garnishments, etc).

Rich

-----Original Message-----

From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Doug Gernaat
Sent: Monday, December 18, 2006 10:44 AM To: oracle-l_at_freelists.org
Subject: removing/masking sensitive data

if your task was to remove/mask sensitive data such as ssn/ccard numbers and those numbers are in multiple tables throughout your database, where would you start?

if you are an oracle tool, what's your name? is an attempt to create a manual script reasonable?

this is oracle 10.2.0.1.0 on winders - relatively small db.

thanks
-doug-

--

http://www.freelists.org/webpage/oracle-l

--

http://www.freelists.org/webpage/oracle-l Received on Wed Dec 20 2006 - 16:15:00 CST