Exploring dynamic data masking

With the new SQL Server 2016 Dynamic Data Masking (DDM), you have an additional tool that helps you limit the exposure of sensitive data by masking it to non-privileged users. The masking is done on the SQL Server side, and thus you don't need to implement any changes to applications to start using it. DDM is available in Standard, Enterprise, and Developer editions.

This section introduces DDM, including:

  • Defining masked columns
  • DDM limitations

Defining masked columns

You define DDM at the column level. You can obfuscate values from a column in a table by using four different masking functions:

  • The default function implements full masking. The mask depends on the data type of the column. A string is masked by changing ...

Get SQL Server 2016 Developer's Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial