On-the-fly data masking
Described are methods, systems, and apparatus, including computer program products for securing data of a production server. The invention, in one implementation, includes reading a data value on the production server, obfuscating the data value in the memory of the server to create a masked value, transmitting the masked value to a non-production server, and storing the masked value on the non-production server.
1. A method, executed on a computer processor of a production server, for securing data of the production server comprising:
reading a data value on the production server;
obfuscating the data value in the memory of the production server by generating via a non-reversible process an index into a secure lookup table based on the data value and retrieving a secure lookup table value at the index in the secure lookup table to create a masked value;
transmitting the masked value to a non-production server; and
storing the masked value on the non-production server.
2. The method of claim 1 , wherein the obfuscating step comprises masking the data value using a segmented mapping technique.
3. The method of claim 1 , wherein the secure lookup table is stored on the non-production server.
4. The method of claim 1 , further comprising generating a report of the obfuscation step.
5. The method of claim 1 , further comprising emailing a user the status of the obfuscating step.
6. The method of claim 1 , further comprising presenting a plurality of obfuscation techniques to the user and basing the obfuscating step on a selection made by the user.
7. A computer program product, tangibly embodied in a non-transitory computer-readable storage medium, for securing data of a production server, the computer program product comprising instructions operable to cause a data processing apparatus to:
read a data value on the production server;
obfuscate the data value in the memory of the production server by generating via a non-reversible process an index into a secure lookup table based on the data value and retrieving a secure lookup table value at the index in the secure lookup table to create a masked value;
transmit the masked value to a non-production server; and
store the masked value on the non-production server.
8. The computer program product of claim 7 , wherein the obfuscating step comprises masking the data value using a segmented mapping technique.
9. The computer program product of claim 7 , wherein the secure lookup table is stored on the non-production server.
10. The computer program product of claim 7 , further operable to cause the data processing apparatus to generate a report of the obfuscation step.
11. The computer program product of claim 7 , further operable to cause the data processing apparatus to email a user the status of the obfuscating step.
12. The computer program product of claim 7 , further operable to cause the data processing apparatus to present a plurality of obfuscation techniques to the user and base the obfuscating step on a selection made by the user.
13. A system for securing data used by a production server, the system comprising:
a target environment comprising a target database and a target application server, the target application server configured to store a masked value received from the production server; and
a production environment comprising a production database and the production server, the production server comprising a processor and a memory and configured to:
read a data value on the production server;
obfuscate the data value in the memory of the production server by generating via a non-reversible process an index into a secure lookup table based on the data value and retrieving a secure lookup table value at the index in the secure lookup table to create a masked value; and
transmit the masked value to the target application server.
14. The system of claim 13 , wherein the production server is configured to obfuscate the data value using a segmented mapping technique.
15. The system of claim 13 , wherein the secure lookup table is stored on the target application server.
16. The system of claim 13 , wherein the production server is configured to generate a report of the obfuscation step.
17. The system of claim 13 , wherein the production server is configured to email a user the status of obfuscating the data value.
18. The system of claim 13 , wherein the production server is further operable to present a plurality of obfuscation techniques to a user and base the obfuscating operation on a selection made by the user.