Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Obfuscate database table names

We're about to undergo a project where we'll be handling highly sensitive data. Apart from encrypting the data I was thinking about obfuscating the table names.

So tEmployees would become t58633B7A for example. Would this be a useful to add? after all it's about building layers of security/prevention.

P.S. We'll map the obfuscated table names to the real names in our Data Access Layer

like image 516
Naeem Sarfraz Avatar asked Nov 27 '22 12:11

Naeem Sarfraz


1 Answers

This seems entirely superfluous. If an attacker has gained access to the database, then simply not knowing the table name is little protection in the grand scheme of things. You should spend your time, if anything, on better intrusion detection and protection mechanisms.

like image 53
Joel Martinez Avatar answered Dec 18 '22 21:12

Joel Martinez