This section discusses how to mask sensitive data in non-production databases by using the Data Masking feature in Oracle Data Safe.

• Data Masking Overview
  Data masking, also known as static data masking, is the process of permanently replacing sensitive data with fictitious yet realistic looking data. It helps you generate realistic and fully functional data with similar characteristics as the original data to replace sensitive or confidential information.
• Conditional Masking
  You can use conditional logic when editing masking formats. Conditional masking is not available when creating masking formats, however.
• Group Masking
  Group masking, also known as compound masking, enables you to mask related columns together as a group, ensuring that the masked data across the related columns retain the same relationship. You can use the group masking feature when you create data masking jobs.
• Predefined Masking Formats
  To help you mask common sensitive and personal data, such as credit card numbers, phone numbers, and national identifiers, Oracle Data Safe provides predefined masking formats. You can use predefined masking formats as is without providing any input. You cannot edit or delete predefined masking formats.
• Basic Masking Formats
  Oracle Data Safe supports several basic masking formats that you can use as building blocks when creating new masking formats.
• View Masking Formats
  You can view Oracle predefined masking formats and user-defined masking formats from the Masking Formats page in Security Center. Becoming familiar with the predefined masking formats helps you to create masking policies.
• Create or Edit Masking Formats
  You can create your own masking formats by using the basic masking formats in Oracle Data Safe as your starting point.
• Create Masking Policies
  You can create a masking policy from a sensitive data model or create an empty masking policy for a target database and add sensitive columns later.
• View Masking Policies
  You can view masking policies from the Masking Policies page. Masking policies are either created from this page or uploaded to this page.
• Edit Masking Policies
  After you generate the initial masking policy for a target database, you most likely will need to edit it. For example, you might need to address sensitive columns that do not have an associated masking format, change masking formats, apply conditions to some masking formats, mask related columns together as a group (group masking), or add or remove sensitive columns from the masking policy.
• Mask Sensitive Data on a Target Database
  You can run a Data Masking job from the Data Masking page or the Masking Policy Details page.
• View and Analyze Data Masking Reports
  After you run a data masking job, Oracle Data Safe saves all the details about the data masking job in Security Center as an online report and tracks statistics across the top five masking policies for a target database.
• Download Data Masking Reports
  You can download a data masking report as a PDF or XLS file. You first need to generate the report before you can download it. Generate the report in the file format that you wish to download.
• Download or Upload Masking Policies in XML Format
  You can download an XML version of a masking policy and upload it into Oracle Data Safe, replacing an existing masking policy or creating a new one. Before downloading a masking policy, you first need to generate it as an XML file.
• Manage Masking Formats and Masking Policies
  You can move user-defined masking formats and masking policies to different compartments and delete them as needed. You cannot delete Oracle predefined masking formats.