~/talk

Defining a Data Masking Framework at Scale

Talkat BSidesSF 2023 · 2023-04-22..04-23· [security, databases]
links:none on file
name:Tim Lam
links:none on file
slides:none on file

Example company RealCorp evolves from blanket encryption to hashing, then to format-preserving encryption and finally to tokenization to enable analytics while protecting salaries and IDs; an IBM-inspired scheme uses epoch-based token key rotation with update tweaks so hosts can roll mappings forward without rekeying the whole dataset. Presentation lists concrete failures: hashing is rainbow-table vulnerable, FPE leaks type-based inferences, token maps fail catastrophically if breached, and masking often preserves too much structure.

AI-written summary · about

  1. 0:00Introduction
  2. 1:04Data security evolution
  3. 6:23Tokenization approach
  4. 9:35Dynamic key rotation
  5. 11:22Privacy vs security
  6. 13:30User-facing privacy controls
  7. 15:58Other protection techniques
  8. 18:08Choosing protection strategies
  9. 19:54Common pitfalls
  10. 21:39Q&A session
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.