QUESTION POSED ON: 06 December 2004 Are you aware of a way to scramble salary data? Our Prodcution instance has all the appropiate security that we need, as we limit developer and user access. However, with our Development and Test instance clones we would like to be able to give our support staff (technical and functional) wide access; however, our inability to scramble only the salary data prohibits this.
>
In pre-10g database versions, you can use triggers and
DBMS_OBSFUCATION_TOOLKIT to encrypt/decrypt any data you wish. Starting with
10g, you should use DBMS_CRYPTO (which is also easier to spell!) which
provides similar functionality. I believe that there are a few good Metalink
articles providing some examples of how you could implement such a system.
The problem with encryption is that you need to maintain the
encryption/decryption keys somewhere safe yet still make them available to the
automated processes that need them. So, you may make it more difficult to
access the data directly, but it will be near impossible to absolutely secure
the data using encryption due to the key storage problem.
Search and Browse the Expert Answer Center Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.