BronzeGate: real-time transactional data obfuscation for GoldenGate

Data privacy laws have appeared recently, such as the HIPAA laws for protecting medical records, and the PCI guidelines for protecting Credit Card information. Data privacy can be defined as maintaining the privacy of Personal Identifiable Information (PII) from unauthorized accessing. . PII includes any piece of data that can be used alone, or in conjunction with additional information, to uniquely identify an individual. Examples of such information include national identification numbers, credit card numbers, as well as financial and medical records. Access control methods and data encryption provide a level of data protection from unauthorized access, however, it is not enough; it does not prohibit identity thefts. It was reported that 70% of the data privacy breaches are internal breaches that involve an employee from the enterprise who has access to some training or testing database replica, which contains all the PII. In addition to access control, we need techniques to obfusca...

• Type: Conference
• Year: 2010
• Where: EDBT
• Authors: Shenoda Guirguis, Alok Pareek
• Keywords: Data Obfuscation, Data Privacy, Data Privacy Laws, Database, EDBT 2010