How to secure your database and

Stone Lee() Oracle Taiwan Inc

Oracle Database Security Solution

Oracle Database Security

Monitoring

Configuration Management
Access Control

Audit Vault

Total Recall

Database Vault
Encryption and Masking

Label Security

Advanced Security

Secure Backup

Data Masking
3

2009 Oracle Corporation

123-45-6789 123-45-6789

 1
Data Masking Pack
Staging

889-90-7777 123-45-6789

123-45-6789

What is data masking?

What The act of anonymizing customer, financial, or company confidential data to create new, legible data which retains the data's properties, such as its width, type, and format. Why To protect confidential data in test environments when the data is used by developers or offshore vendors When customer data is shared with 3rd parties without revealing personally identifiable information

LAST_NAME SSN
AGUILAR
BENSON DSOUZA FIORANO

SALARY
40,000
60,000 80,000 45,000

203-33-3234
323-22-2943 989-22-2403 093-44-3823

LAST_NAME SSN
ANSKEKSL BKJHHEIEDK KDDEHLHESA FPENZXIEK 11123-1111 111-34-1345 111-97-2749 111-49-3849

SALARY
40,000 60,000 80,000 45,000

or 3rd Party Vender 6

Format Libraries
Mask Primitives
Random Number Random String Random Date within range Shuffle Sub string of original value

User Defined Function

National Identifiers Social Security Numbers Credit Card Numbers

Masking Definitions & Referential Integrity Enforcement

Associates formats with database
Maps formats to table columns being masked Defines dependent columns Associated Database target

Automatically identifies Foreign key relationships Can specify undeclared constraints as related columns Import-from or export-to XML Create like to apply to similar databases
8

Certification and availability

Certification Oracle Database 9i through 11g
Availability Enterprise Manager Grid Control10gR4 (10.2.0.4) above

Enterprise Manager Data Masking Pack

Major features
Automatic database referential integrity when masking primary keys Implicit database enforced Explicit application enforced Data mask format library View sample data before masking Application masking templates Define once; execute multiple times

Clone Production Staging

Clone

Test

Test
10

Oracle
Oracle

Advanced Security Data Masking Database Vault

Audit Vault

11

Oracle Database Security Summary

Data Masking Pack

Advanced Security

Database Vault

Audit Vault

Configuration Management Pack

12

Questions

13