We're about to undergo a project where we'll be handling highly sensitive data. Apart from encrypting the data I was thinking about obfuscating the table names.
So tEmployees
would become t58633B7A
for example. Would this be a useful to add? after all it's about building layers of security/prevention.
P.S. We'll map the obfuscated table names to the real names in our Data Access Layer
This seems entirely superfluous. If an attacker has gained access to the database, then simply not knowing the table name is little protection in the grand scheme of things. You should spend your time, if anything, on better intrusion detection and protection mechanisms.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With