PDF p.78
In progress
Obfuscation
Summary
PDF p.78Obfuscation makes data difficult to find, providing security through obscurity. While generally deprecated, it has specific uses such as steganography, data masking, and tokenization. These techniques help protect data confidentiality, integrity, and privacy.
In plain words
Supplementary — not from your PDFObfuscation makes data hard to find or read without truly encrypting it. Steganography hides messages inside other files. Data masking shows only part of a value, like the last four card digits. Tokenization swaps real values for random tokens kept in a separate vault.
Detailed explanation
PDF p.78-
Steganography
- Definition: Embeds information within an unexpected source (e.g., a message hidden in a picture).
- Covertext: The container document or file.
- Confidentiality: The message can be encrypted before embedding.
- Integrity/Non-repudiation: Can demonstrate authenticity or detect tampering.
-
Data Masking
- Definition: Redacts all or part of the contents of a database field.
- Example: Substituting characters with "x" or partially redacting fields (e.g., retaining dialing prefix in a phone number).
- Format Preservation: Techniques to maintain the original format of the field.
-
Tokenization
- Definition: Replaces database field values with randomly generated tokens.
- Token Storage: Tokens and original values stored separately in a token server or vault.
- Reversibility: Authorized queries can retrieve original values.
- Regulatory Compliance: Used as a substitute for encryption.
-
De-identification
- Purpose: Obfuscates personal data to share without compromising privacy.
- Techniques: Data masking and tokenization.
Important terms
taken from the text above- Steganography
- Embeds information within an unexpected source (e.g., a message hidden in a picture).
- Covertext
- The container document or file.
- Confidentiality
- The message can be encrypted before embedding.
- Integrity/Non-repudiation
- Can demonstrate authenticity or detect tampering.
- Data Masking
- Redacts all or part of the contents of a database field.
- Format Preservation
- Techniques to maintain the original format of the field.
- Tokenization
- Replaces database field values with randomly generated tokens.
- Token Storage
- Tokens and original values stored separately in a token server or vault.
- Reversibility
- Authorized queries can retrieve original values.
- Regulatory Compliance
- Used as a substitute for encryption.
Examples & real-world scenarios
Supplementary — not from your PDF- Masking: showing ****-****-****-1234 to support staff.
- Tokenization: storing a random token instead of the card number.
- Steganography: a message hidden in an image file.
Scenario
An online shop wants to keep card numbers out of its main database to reduce compliance scope. It tokenizes: the database stores tokens, and only a tightly controlled token vault can map them back.
Common mistakes
Supplementary — not from your PDF- Treating masking as reversible for the person viewing it. It isn't.
- Thinking obfuscation is a substitute for encryption everywhere. Tokenization and masking fit specific cases.
Practical skills
Supplementary — not from your PDF- Pick masking, tokenization or encryption for a data-sharing need.
What I should remember
Key Points PDF p.78-
Steganography
- Hidden Information: Embeds data in unexpected sources.
- Covertext: Container document/file.
- Confidentiality: Encrypted message.
- Integrity/Non-repudiation: Authenticity and tampering detection.
-
Data Masking
- Redaction: Substitutes or partially redacts data.
- Example: "x" substitution, partial redaction.
- Format Preservation: Maintains original format.
-
Tokenization
- Random Tokens: Replaces field values.
- Token Storage: Separate from production database.
- Reversibility: Retrieve original values.
- Compliance: Substitute for encryption.
-
De-identification
- Privacy Protection: Obfuscates personal data.
- Techniques: Data masking, tokenization.