Take a closer look at FieldShield
Consider the advantages of targeted data protection
IRI FieldShield is a robust package for Startup safety, compliance with data privacy laws, and provision of test data that contains personally identifiable information (PII) in several Database tables and structured (flat or compressed) file formats – on-premises or in the cloud, static or streaming – with one or more Data masking rules finds, classifies, and consistently protects.
FieldShield is also a deterministic, content-aware data loss prevention tool, as it consistently applies the masking functions you define only to the columns (fields) that need to be protected. It also includes multiple search functions, evaluates the risk of re-identification through quasi-identifiers and offers extensive audit logs for documenting PII scans, job procedures, and runtime performance.
Click the technical attributes of FieldShield below to learn more:
Classification & Data Discovery
According to Gartner's data masking analysts, only about half of the companies that store sensitive data know where it is. The cross-platform capabilities included in FieldShield Database and File Profiling Tools Classify, locate, and graphically represent PII based on patterns, value lookups, and fuzzy search matches. Additional search assistants automate PII detection based on data classes, column names, and RegEx patterns across multiple files, tables, schemas, and databases.
De-identification
FieldShield users can apply the same or different functions simultaneously to any number of columns across any number of sources. FieldShield offers data-centric protection across 14 commercially available function categories, with the ability to define (customize) your own masking routine:
multiple, NSA Suite B and FIPS compliant encryption and decryption algorithms, including format-preserving Encryption
SHA-1 and SHA-2Hashing
3. ASCII-De-ID (Big Scrambling)
4. Binary Encoding
5. Data blurring (random noise)
6. and Bucketing / GeneralizationAnonymization)
8. Blackening (String masking), effectively deletion
9. Reversible and Irreversible Pseudonymization
10. Propositional logic (Calculation / Shuffle)
11. Conditional / Partial Filtering (Omission)
12. Custom Value Assignment and Type/Format Conversion
13. Byte Shift and Sub-String Functions
14. Tokenization (for PCI)
The protection you choose for each field depends on your need for security, reversibility, appearance, and speed. In addition to the built-in functions, you can also write and call your own field functions at runtime.
Security
Different masking functions applied to different data classes offer multiple possibilities for protecting data within a single dataset. Field-level (column-level) protections are also more secure because even if protection is breached by accessing a specific decryption key for one column, the other columns can remain protected. In contrast, a single password can grant access to all data in the database, table, file, or volume.
FieldShield also uses state-of-the-art encryption algorithms that are difficult to crack. You can strengthen encryption through random tokenization, hashing, and secure, rotating encryption keys. Data obfuscation techniques in FieldShield can also make original values indecipherable forever (irreversibly). A non-reversible data masking method like redaction or filtering removes any computational basis for deriving the original value.
Performance
Field-level protection is inherently efficient, meaning you apply protection surgically to selected rows and columns rather than in bulk. When dealing with large amounts of data, FieldShield utilizes the advanced data movement algorithms and resource utilization techniques for which its parent product IRI CoSort-Product (Big Data Transformation and Reporting) is famous.
You can also field shield with IRI FACT (Fast Extract) combine to unload Very Large DataBase (VLDB) tables into flat files for faster protection operations. If you the parent program CoSort Sort SortCL You can perform the same protection operations during data transformation, cleaning, mapping, and pre-loading sorting jobs that feed BI and DB targets.
And when you FieldShield in the Voracity Platform using, equipped with the Premium Option VGrid (Voracity Gateway) for Hadoop, you can many of the same data masking jobs interchangeable run in MapReduce2, Spark, Spark Streaming, Storm or Tez
Warranty
FieldShield includes automated, expert-reviewed statistical analysis and Graphical assessment of re-identification risk, to support compliance with FERPA, the HIPAA Security Rule Expert Determination Method, and GDPR Recital 26.
FieldShield's PII discovery processes can be used not only to classify data, but also to create records of where it was found and extract search results in formats you can use to deliver that data to applicants in accordance with GDPR data portability provisions. Data deletion and cleansing through the included features also support the right to be.
FieldShield provides an audit trail in queryable log files for every masking job. These logs record all scripted metadata for the source and target data and masking functions, as well as the conspicuous runtime environment for user accountability.
Finally, FieldShield provides real-time security through multiple methods, including: role-based access controls, robust encryption key management, direct support for SQL SELECT and UPDATE logic, and masking routines callable from your applications.
User friendliness
Database vendors' column encryption is cumbersome and limited to their platform or a few functions. Other data masking tools on the market are clunky, and designing and changing jobs in them is difficult. Maintaining referential integrity with them has also been a problem.
Static Data Masking Jobs In contrast, FieldShield defines them in self-documenting 4GL scripts that uniquely identify source field layouts and target field protection and formats. The scripts are easily modifiable and can be securely exchanged with FieldShield developers and end-users who need to mask or unmask data.
FieldShield scripts and language learning are not required, however! With the free IRI Workbench GUI For FieldShield, which is built on Eclipse™, you get a familiar graphical IDE to work with:
Assistants for creating jobs for masking single and multi-source data
2. Automated PII Detection, Classification, and Metadata Definition
3. Re-ID Risk Scoring for the HIPAA expert determination method and FERPA compliance
4. Definition and Protection of Master Data
5. Automatic application of masking rules via semantically matching column names or data classes
6. Project Management (Teaming) and Version Control
7. Management of Encryption Keys
8. XML Job Audit Logs for Data Protection Law Compliance Review
FieldShield jobs can be launched and run from anywhere you need them. Choose between ad-hoc or scheduled execution from IRI Workbench, on a Unix/Linux/Windows command line, or from any application or automation tool of your choice.
Programmers find FieldShield for the Dynamic data masking easy to use, as the SDK that IRI publishes for C/C++, Java, and .NET developers is relatively short and simple.
Everything from a single source
FieldShield users benefit from instant metadata links, job scripting compatibility, and graphical integration with re-ID risk scoring, data transformation (integration and staging), synthetic test data generation and DB subsetting, data migration and replication, data cleansing and enrichment, and 2D reporting, analysis, and data wrangling capabilities in the IRI Workbench-GUI for IRI Voracity platform for total data management. The FieldShield-compatible SortCL program, which has been upgraded to Voracity and its default settings, allows you to data masking to the same job script and I/O pass with multiple data manipulations to add.
FieldShield also shares data classification and masking capabilities with IRI Ripcurrent for incremental real-time DB masking and with IRI DarkShield for semi- and unstructured data sources. FieldShield and other IRI data masking tools supported in Workbench and included in Voracity handle not only the variety and volume of big data, but also various aspects of data speed, such as Ripcurrent (see above), in SQL statements, pipes, programs, and message queues, as well as via dynamic data masking or ad hoc/scheduled batch jobs.
FieldShield and other IRI toolsMetadata Data definition files (.ddf) are also supported by DataSwitch, erwin (Quest) Mapping Manager, and Meta Integration Model Bridge (MIMB). These tools convert metadata already defined in third-party BI, CRM, DB, ETL, and data modeling tools into FieldShield DDFs. FieldShield is also compatible with Windocks, Actifio, and Commvault database cloning software. This makes it easy to protect data in your current environment.
Support
The FieldShield functionality has been on the market since 2007 in CoSort and as a standalone product since 2011. It is directly by IRI, its authorized representatives in major world cities, and by external cybersecurity consulting partners in GUI, CLI, or API mode. supports. These experts are all invested in your success and offer quick, responsive help for your use cases or trouble tickets with or without formal SLAs.
Do you also expect the same level of support years after using the product as you received during the evaluation and proof-of-concept phase, even if your needs change? We are happy to provide references who can speak to their experiences with IRI's data masking technology and support.