Data masking

Data masking is the process of applying a mask on data to hide sensitive information and replace it with new data or scrubbed data.

Data masking divides into two categories:

Static Data Masking vs. Dynamic Data Masking:

Static Data Masking Dynamic Data Masking
Happens on a physical copy of the database Happens on the original database
Original data not retrievable Original data intact
Mask occurs at the storage level Mask occurs on-the-fly at query time
All users have access to the same masked data Mask varies based on user permission

In Querona both data masking techniques are available, yet are implemented slightly differently than in a database server: static data masking is automatically used when a persistent cache is built, meaning that data written to the DBMS handling the cache is replaced with masked values.

Original data can be retrieved only by Querona and the seed value used to scrub the data must be known.