sql-serverobfuscation

Obfuscate database table names


We're about to undergo a project where we'll be handling highly sensitive data. Apart from encrypting the data I was thinking about obfuscating the table names.

So tEmployees would become t58633B7A for example. Would this be a useful to add? after all it's about building layers of security/prevention.

P.S. We'll map the obfuscated table names to the real names in our Data Access Layer


Solution

  • This seems entirely superfluous. If an attacker has gained access to the database, then simply not knowing the table name is little protection in the grand scheme of things. You should spend your time, if anything, on better intrusion detection and protection mechanisms.