When working with database, we sometimes have to backup-restore them in order to bring them to a test environments. When this happens on premise, there is a good chance the backup gets restored to a know machine.
With the cloud and outsourcing, the backup could be restored miles away on another continent.
Go read this : SQL Azure Data Masking
Ok, the concept is easy enough to grasp, but it is based on the fact that you login with one or another user. Most web applications use a generic user to connect to the database and implement application level security, not at the database layer.
Who knows how we can keep using application security, but pass a special token or something when we need to read the actual data ?
Is there a way to apply the dynamic masking within the database at time of backup so people getting a copy of it gets a safe copy ?
There are two use cases, the first is scrambling data. The second is just not showing it all (i.e. a Er** instead of Erik). Do the where clauses apply to the real value or the mask ?
Great things with this technology, i just have to start testing it out…

Leave a comment