0

Can anyone help me explain on what basis 'Data Migration Assessment' features recommendation suggests for Dynamic Data Masking and displays certain objects/tables columns for masking. On what basis DMA identifies those columns for vulnerabilities.

Is there any set algorithm for identification or is it simply based on the name of the column?

enter image description here

Please comment in case of any more details or clarification required for the question.

Improve this question

1 Answer 1

Reset to default
2

From what I understand, DMA looks at the column names and tables for keywords that would hold PII, Sensitive Data (such as logins, passwords, etc.), or other unique data attributes. If it finds anything then it should mark it for both dynamic data masking and always encrypted.

If you change the name of the column to not have easily identifiable keywords, the recommendation should not show up for that column/table.

Improve this answer
2
  • Then how should we discover sensitive columns in SQL Server? Is there any tool available for that? Or any algorithm through TSQL?
    – SSS
    Commented Jul 27, 2019 at 15:49
  • @ShauryaS That is what DMA is doing as a tool... If you want do to more, then you'll have to make something tailored to what you're looking for.
    – Sean Gallardy
    Commented Jul 27, 2019 at 16:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.