文档介绍：该【2022年lesDataMask数据库安全审计 】是由【海洋里徜徉知识】上传分享，文档一共【40】页，该文档可以免费在线阅读，需要了解更多关于【2022年lesDataMask数据库安全审计 】的内容，可以使用淘豆网的站内搜索功能，选择自己适合的文档，以下文字是截取该文章内的部分文字，如需要获得完整电子版，请下载此文档到您的设备，方便您编辑和打印。Using the Data Masking Pack
Objectives
After completing this lesson, you should be able to use the Data Masking Pack to:
Create masking formats
Manage format library
Mask sensitive and confidential data
Create custom reports
Data Masking: Overview
What is data masking? Data masking is the process of replacing sensitive information with realistic data based on masking rules.
Why use data masking? Use data masking so that data can be shared with nonproduction users such as testing companies.
Understanding Data Masking
EMPLOYEE_ID
LAST_NAME
DEPARTMENT_ID
PHONE_NUMBER
100
King
90
105
Austin
60
110
Chen
100
EMPLOYEE_ID
LAST_NAME
DEPARTMENT_ID
PHONE_NUMBER
468
Jefferies
90
975
Smith
60
396
Allen
100
Using the Data Masking Pack
Implement data masking in an Oracle database by using the Data Masking Pack:
Separately licensed Oracle Enterprise Manager management pack
Data Masking Pack: Features
Uses an irreversible process to replace the sensitive database based on masking rules
Ensures that the original data cannot be retrieved, recovered, or restored
Enables you to define a central definition for common data masking formats to be used with all databases
Data Masking: Best Practices
Create predefined mask formats for all common regulated information so that they can be applied to sensitive data regardless of which database the data resides in to ensure that sensitive data is consistently masked across the organization.
Implementing Data Masking
Identify
sensitive
information
Create
data mask
formats
Create
masking
definitions
Clone
production
to staging
Create
masking
definitions
Execute
masking
job
Clone
staging
to test
Security admin
DBA
Production
Staging
Test
App DBA
Identifying Sensitive Data for Masking
The security administrator identifies data that needs to be masked to ensure regulation compliance.
The application database administrator:
Determines specific columns
“Flags” columns with column comment
COMMENT ON COLUMN IS 'MASK candidate: HR Benefits Policy';
COMMENT ON COLUMN IS 'MASK candidate: HR Privacy Policy';
COMMENT ON COLUMN IS 'MASK candidate: HR Privacy Policy';
COMMENT ON COLUMN IS 'MASK candidate: HR Compensation Policy';
Security admin
App DBA
Managing the Data Mask Format Library
The Data Masking Pack format library contains a collection of ready-to-use masking formats that are used when creating a masking definition.
Masking formats can be defined using:
Built-in data masking primitives, referred to as “format entries”
User-defined format masks
A format library can be exported (saved as an XML file) so that it can be reused or shared with another Enterprise Manager Grid Control installation using a different repository.