Masking means blacking out sensitive data in a content or replacing it with fixed text. The GEODI Masking tool creates a masked copy of your document. Masking accuracy is very high thanks to GEODI Discovery powered by Artificial Intelligence and Natural Language Processing.
GEODI Masking works for file types such as Word, Excel, Powerpoint, RTF or Open Office. In content viewers, it is accessed by selecting "Mask" from the top right menu.
...
Masking The masking module provides several different masking capabilities.
File Masking: In file-based data, discovery layers identified as sensitive or designated as copies are masked. It is possible to define rules separately for personal data, financial data, or any other type of data. A duplicate document can be created where all discovered words, identifiers, or dictionary-based findings are concealed. Different masking options may result in variations of the same document shared with legal and procurement units.
Dynamic Masking: Selected discovery layers for specified groups/users are dynamically masked. This means that while one user sees the document in its entirety, another user may view it with financial areas or personal data concealed.
Database Masking: It is possible to mask a database for software development teams. This capability should not be confused with products that perform dynamic database masking.
Masking with GEODI Discovery takes into account personal data, monetary financial data, or dictionaries discovered with GEODI Discovery.
You can create options to suit your masking needs. It is possible to mask all metadata or only monetary information. Your system administrator can add new options. The default settings on GEODI for masking are:
...
Masking Financial Data → MaskedMetaID: Finance01
IBAN
Credit Card Number (Visa,Mastercard,American,JCB)
Euro(€)
Dollar($)
Turkish Lira(₺)
Pound/GBP(£)
...
Masking Monetary Data → MaskedMetaID:MoneyData01
Euro(€)
Dollar($)
Turkish Lira(₺)
Pound/GBP(£)
Masking of Personal Data Only → MaskedMetaID: PersonalData_01
...
Name
...
TRID
...
TID
...
...
Address
...
IBAN
during the exploration process.
...
File Masking
GEODI creates a copy of the content undergoing masking to perform the process. The operation functions in the "Mask and Download" manner.
| Info |
|---|
|
Dynamic Masking
With dynamic masking, the results of the discovery are visible in screens such as the viewer, words, network graph, summary, etc., in a masked form.
Masking in the viewer is applicable to the following types, regardless of their source, whether they are embedded in a File Server, SharePoint, or a Database.
Office Files (Word, Excel, PowerPoint)
Open Office (ODT, ODS, ...)
PDF
TXT, XPS
On the last page of the project wizard, the "Dynamic Masking" box is selected, and settings are configured.
Once adjustments are made, files in the project are displayed to users in a masked format.
It operates with group-based authorization.
A masking metadata is defined for each group.
When group members open a file from the project, it is displayed in a masked form according to the defined masking metadata.
...
The "No Masking" setting displays the results without masking for the defined group.
Groups and members without authorization display all discovery results in a masked form.
In accordance with the "All" masking metadata.
When downloading files, it also downloads them in a masked form.
Database Masking
Database masking performs permanent masking on the given database. If you want the original data to remain intact, you can also work on a copy.
Database masking provides several use cases:
When you need to share your database with software or testing teams. Masking permanently removes sensitive data from your database for this use case.
When you share your database for data analysis, it permanently removes sensitive data, allowing you to safely share the database.
Authorization
The authorization for masking is the same as the document download permission. Those with download permission can use masking.
Dynamic masking allows authorization at the user and discovery layer levels.
License
A MASKING license is required for masking.
The number of users using masking is equal to the number of GEODI users.
Masking is meaningful with Corporate Search.
It is recommended to have a Discovery license for masking. Otherwise, masking will be limited to information discovered within the scope of STD.
Batch Masking
To create a script for Bulk Masking, go to the Reports menu. For this script, specify the masking profile and the directory where result files will be located. The generated script can also be edited to modify the original files.
Masking Profiles
Masking profiles determine which discovery results will be masked and how they will be masked using the Masking Module. The Masking Module provides the following default profiles, which you can customize according to your needs.
You will need the ID values for batch operations like Bulk Masking. Below, you will find the default profiles:
ID: Finance01 -> [$.tr:Financial Data;en:Financial Data] → Identifiers labeled IsFinancial and IsMoney (IBAN, Credit Card Number (Visa, Mastercard, American, JCB...), Currencies)
ID: MoneyData01 -> [$.tr:Monetary Data;en:Monetary Data] → Identifiers labeled IsMoney (Euro(€)
...
, Dollar($)
...
, Turkish Lira(₺)
...
, Pound/GBP(£), ...)
ID: PersonalData_01 -> [$.tr:Personal Data Only;en:Personal Data Only] → Identifiers labeled PII (SSN, and identifiers for ID and Passport numbers of different countries)
Name
ID Number (Turkish: TCKN)
Tax ID (Turkish: VKN)
Email
Address Block Identifier
ID: All
...
All information that recognizers in your project recognize
These default settings can be customized as desired and you can use different characters for masked content.
Masking requires additional license
...
-> All
Used to mask all information recognized by the identifiers in your project.