Design And Implementation Of Data Masking System For Relational Database

With the arrival of the era of big data,the data showed exponential growth.The growing number of data also leads to the increasing risk of data leakage.Especially in the financial,medical,education,Internet and other industries with a large number of user privacy data and accounting information and other data,the sensitive data of these industries once leaked,will bring serious consequences can not be predicted.Therefore,the financial,medical,education,Internet and other industries urgently need to strengthen sensitive data protection.The data masking system can transform the sensitive data into the other data which have the same characteristics as the original sensitive data and keep the data business association by the masking algorithm.It can effectively ensure the safe use of sensitive data in the production environment and non-production environment,and reduce the possibility of data leakage.This paper focuses on the design and implement of data masking system based on relational database as the research subject.This study refer to relevant literature,research and analysis on the current situation and the existing data masking system,in view of the enterprise demands for protection of sensitive data,to analyze the functional requirements of data masking system.On the basis of requirement analysis,the data masking system is designed in general design,function module design and database design.For the data masking needs of enterprises,the commonly used name masking algorithm,identification card masking algorithm,cell phone number masking algorithm and address masking algorithm are realized.The static data masking process is designed based on data source import,sensitive type discovery and data masking,and the single thread static data masking is realized on the basis of this process.On the basis of the single thread data masking by combining with the knowledge of graph theory,the database tables according to the association to establish directed graph model.A hierarchical parallel topological order is performed to achieve parallel data masking of unrelated tables,in order to achieve a more efficient and suitable for multi-thread static data masking with large amount of data.At the same time,through the analysis of communication protocol of MySQL and the establishment of database agent,the function of dynamic data masking in production environment is realized.Finally,through the functional test and performance test of the system,verify the validity and usability of data masking system,through the experimental analysis of the different situations of different types of data masking performance,summarizes the applicable conditions of different types of data masking.This paper implemented the data masking system with functions of static data masking and dynamic data masking,meet the demand of the enterprise,can effectively prevent sensitive data leakage,ensure the security of sensitive data in use process,has the high use value and significance.