Comparing OEM Data Masking and AMP Data Scrambling Features

My last article spurred a flood of questions about the difference between Oracle Enterprise Manager (OEM) Data Masking and the Application Management Pack's (AMP) Data Scrambling features.

What is Data Masking?


The act of anonymizing customer, financial, or company confidential data to create new, legible data, which retains the original data's properties, such as its width, type, and format.


Datamasking:


The Oracle Enterprise Manager Data Masking Pack uses an irreversible process to replace sensitive data with realistic looking but scrubbed data based on masking rules.  This ensures that original data cannot be retrieved, recovered or restored.


This feature was introduced in Oracle Enterprise Manager 10gR4.


Datamasking-fig:


Major features of Data Masking



  • Maintains Automatic Database Referential Integrity when masking primary keys
    • Implicit - database enforced
    • Explicit - application enforced
  • Provides out-of-the-box Data mask format library
  • View sample data before masking
  • Application masking templates using the Export Mask Definition capability
  • Define once; execute multiple times

Datamasking-Formats:


Masking processes are traditionally slow because they perform table updates.  The Data Masking Pack takes an advantage of built-in optimizations in the database to disable database logging and runs in parallel to quickly create a masked replacement for the original table.


Distinguishing OEM Data Masking and AMP Data Scrambling


The OEM Data Masking is a part of Database Management Pack.  Data Scrambling is a part of the Application Management Pack for E-Business suite, a plug-in for the Oracle Enterprise Manager.


Database Scrambling can only be performed when cloning E-Business Suite environments using the Applications Management Pack.

Here's a detailed comparison of the OEM Data Masking and Applications Management Pack Data Scrambling capabilities:


Distinction-Masking-Scrambling-1: Matrix comparing OEM Data Masking features with Application Management Pack Data Scrambling features

Related Articles


Comments (5)

Great article - exactly what was needed. One concern, though, the data scrambling does NOT maintain referential integrity? What about HR?

Thx,
John

Sanchit Jindal:

Data Scrambling cannot identify a referential integrity in place nor has the intelligence to know where sensitive information resides within DB. However as it痴 built into the EBS it understand the EBS data model (it can validate whether the table mentioned exist in the DB) and is governed by EBS data security. Last but not the least, referential integrity is not enforced at the DB level (in EBS) and is handled at the code level.

Data Scrambling in Application Management Pack for E-Business Suite (EBS Pack) and Data Masking Pack are two similar technologies but with different technical requirements and emphasis.

EBS Pack data scrambling is designed specifically for E-Business Suite, so it has things such as pre-defined masking configurations and integration with Rapidclone. On the other hand, Data Masking Pack is a more general purpose product that has to work with different types of applications. Consequently, there is more flexibility but it also requires more effort to set up.

Conceptually, your choice basically are:

EBS Pack Data Masking: simple / easy
Data Masking Pack: powerful / more configuration

The two packs are not exclusive to each other, by the way. Data scrambling is one of the many features in EBS Pack, which also provides service level management, configuration management, monitoring, etc... Even if you need the additional power that Data Masking Pack provides, you still need EBS Pack for the other purpose. So, get both! :)

Chung Wu
Director of Product Management
Oracle Application Management Packs

kamran siddique:

Can we download this pack for testing ?

Steven Chan:

Hi, Kamran,

I don't see any links for either the Applications Management Pack or the OEM Data Scrambling Pack on the Oracle eDelivery site. I would infer from that that trial downloads aren't available for these products yet.

If you'd like to evaluate either of these products, I'd recommend getting in touch with your Oracle account manager. He or she can make arrangements to get trial versions to you.

Best of luck with your evaluations.

Regards,
Steven

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

Google Search

Archives

Subscribe to Updates

Powered by
Movable Type and Oracle