Hands-On Security in DevOps

Case 2 – database anonymization

During the development and testing process, it's forbidden to allow a development team to access the production databases for any testing or evaluation purposes, due to the risks of unintended disclosure and privacy laws. However, on the other hand, the production data may help the development team for the performance, security, and development evaluation. Therefore, the need for a database anonymization tool that can generate a database full of anonymized data is very important.

The data flow of the database anonymization tool is shown in the following diagram. Although the tool can technically transform the production database into an anonymization database, it's highly recommended to generate anonymization ...