Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 Other SQL Server Topics (2005)
 Protecting SQL Data

Author  Topic 

AskSQLTeam
Ask SQLTeam Question

0 Posts

Posted - 2007-03-20 : 09:51:07
Andy writes "Good day Gurus!

I have a question regarding how to protect my SQL data. My Material Resource Planning software is built on SQL. There is a problem with my data and possibly a bug in the vendors software. They are asking me to send them my database.

My database contains vendors, customers, pricing partlists and procedures. The advantage of an MRP/ERP system is that the data is all in one place; the disadvantage is that if I send it out to the vendor, they have access to all that I do. This vendor also supports some of my competitors. My concern is that all it would take is one vendor employee to jump ship with my data on a dongle and I could end up completely compromised as a company.

Is there a way of easily or is there software that can leave the significant data in tact but replace the confidential data with meaningless information?

Significant data would be numbers, costs, etc, or data that I choose. Confidential data would be vendors, customers, etc.

It seems to me that this would be a fairly common problem, but I cannot find a solution that is both quick and effective.

Thanks for your collective thoughts.

Andy,"

LoztInSpace
Aged Yak Warrior

940 Posts

Posted - 2007-03-20 : 17:56:02
It's pretty common. Just use the update statement to clear or scramble stuff like
- account numbers
- phone numbers
- names
- addresses
- email
- fax

etc.
It's pretty tedious but easy - a nice Friday afternoon job.
Go to Top of Page

akveps
Starting Member

1 Post

Posted - 2007-03-21 : 02:39:00
Thanks for the reply. Thats basically the way I was looking at going about it, but we may need to send the dataset over several times in the course of a year.

So I was wondering if there was a mangler utility out there that a person could feed a table name and column and what to do with the data. For instance, the user could say that the colum 'vendor name' in the table 'contacts' could be changed to scrambled or better yet a direct substitution from some random yellow page entry. Phone numbers could be deleted, part names altered, etc. In this way the data would still be recognizeable.

I would suspect that the software utility would generate a cross reference table when it was done. This would be the 'key' and I would hang on to this and pass out the dataset with a lot less worry.

When the vendor figured out the problem and told me how to fix the error in my software, I could use the key to look up the issue in the real dataset and fix the problem locally.


I didnt think it would be that difficult to write but I havent seen one out there. I was hoping to find one or buy one before beating my head against a VB app or some such thing...

Seems really handy though...

Thanks again
Go to Top of Page

skyter
Starting Member

1 Post

Posted - 2007-03-30 : 09:11:14
Look at this: http://www.datamasker.com/
Go to Top of Page
   

- Advertisement -