Skip to Main Content

Breadcrumb

Question and Answer

Connor McDonald

Thanks for the question, Jithu.

Asked: February 11, 2018 - 4:34 am UTC

Last updated: February 13, 2018 - 2:37 am UTC

Version: 11.2.0.4.7

Viewed 1000+ times

You Asked

Hi TOM

I have a requirement of masking sensitive data as we have to refresh production data to development environment. I have gone through a couple of options ,Data masking through enterprise manager and through vpd policy.

The actual requirement is to mask 4 columns of a table when selecting as it contains sensitive data. I would want to know
1) If I implement it through EM,does this affect all queries,especialy when performing conditional inserts/deletes etc
2) If vpd is used can I replace the null values with some letters of my choice
3) Is there any other way I can replace sensitive data with random text other than 1 &2


Thanks
Jithu

and Connor said...

1) My understanding is that data *masking* is a physical change to the data, ie, you update the sensitive data to something harmless as it is copie.

2) VPD is about mainly restricting the visibility of that data, but see my link below.

3) Data Redaction

Some good examples for (2) and (3) here

https://asktom.oracle.com/pls/asktom/asktom.search?tag=data-redaction

The "Data Redaction" mentioned in that post is available in 11.2 as well as 12c.


Rating

  (1 rating)

Is this answer out of date? If it is, please let us know via a Comment

Comments

using Datapump REMAP_DATA option

Rajeshwaran, Jeyabal, February 13, 2018 - 6:34 am UTC

Is there any other way I can replace sensitive data with random text other than 1 &2

looking for something other than those listed above, then datapump with REMAP_DATA option could help us.

something like this - https://tinyurl.com/yans3oq5

More to Explore

Design

New to good database design? Check out Chris Saxon's full fundamentals class.