数据定位

数据定位

能够正确地定位和识别敏感信息可以指数级地减少在数据库中花费的时间。这意味着花费更少的时间和拥有更多花在研究其他载体上的时间。

MySQL

数据定位查询

描述查询语句
数据库大小SELECT table_schema“Database Name”,sum(data_length + index_length)/ 1024/1024“Database size in MB”,sum(data_free)/ 1024/1024“Free Space in MB”FROM information_schema.TABLES GROUP BY table_schema;
数据库名称关键字SELECT table_schema“Database Name”FROM information_schema.TABLES WHERE table_schema LIKE“ %passwords% ”GROUP BY table_schema;
表名关键字SELECT table_schema,table_name FROM information_schema.tables WHERE table_schema NOT LIKE“information_schema”AND table_name LIKE“ %admin% ”;
列名关键字SELECT column_name,table_name FROM information_schema.columns WHERE column_name LIKE“ %password% ”;
列数据正则表达式SELECT * from credit_cards WHERE cc_number REGEXP’ ^ 4 [0-9] {15} $ ';

数据定位正则表达式

描述查询语句
所有主要信用卡提供商^(?:4[0-9]{12}(?:[0-9]{3})?|(?:5[1-5][0-9]{2}|222[1-9]|22[3-9][0-9]|2[3-6][0-9]{2}|27[01][0-9]|2720)[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|6(?:011|5[0-9]{2})[0-9]{12}|(?:2131|1800|35\d{3})\d{11})$
Unmasked|Masked SSN^(\ d {3} - \ d {2} - \ d {4} |?XXX-XX-XXXX)$

Oracle

数据定位查询

描述查询语句
寻找敏感数据SELECT owner,table_name,column_name FROM all_tab_columns WHERE column_name LIKE’%PASS%’;
寻找特权SELECT * FROM session_privs SELECT * FROM USER_SYS_PRIVS SELECT * FROM USER_TAB_PRIVS SELECT * FROM USER_TAB_PRIVS_MADE SELECT * FROM USER_TAB_PRIVS_RECD SELECT * FROM ALL_TAB_PRIVS SELECT * FROM USER_ROLE_PRIVS
提取存储过程/ Java源SELECT * FROM all_source WHERE owner NOT IN(‘SYS’,‘SYSTEM’)SELECT * FROM all_source WHERE TYPE LIKE’%JAVA%’ SELECT TO_CHAR(DBMS_METADATA.get_ddl(‘TABLE’,‘DEPT’,‘CONSUELA’))FROM dual

数据定位正则表达式

描述正则表达式
所有主要的信用卡提供商^(?: 4 [0-9] {12}(:[0-9] {3})|(:???5 [1-5] [0-9] {2} |222 [1-9 ]|22 [3-9] [0-9] | 2 [3-6] [0-9] {2} | 27 [01] [0-9] | 2720)[0-9] {12} | 3 [47] [0-9] {13} | 3(:0 [0-5] | [68] [0-9])[0-9] {11} | 6(?:011 | 5 0-9] {2})[0-9] {12} |(?:2131 | 1800 | 35 \ d {3})\ d {11})$
Unmasked |Masked SSN^(\d{3}-?\d{2}-?\d{4}|XXX-XX-XXXX)$

SQL Server

数据定位查询

描述查询语句
列出非默认数据库SELECT NAME FROM sysdatabases WHERE (NAME NOT LIKE ‘distribution’) AND (NAME NOT LIKE ‘master’) AND (NAME NOT LIKE ‘model’) AND (NAME NOT LIKE ‘msdb’) AND (NAME NOT LIKE ‘publication’) AND (NAME NOT LIKE ‘reportserver’) AND (NAME NOT LIKE ‘reportservertempdb’) AND (NAME NOT LIKE ‘resource’) AND (NAME NOT LIKE ‘tempdb’) ORDER BY NAME;
列出非默认表SELECT ‘[’ + SCHEMA_NAME(t.schema_id) + ‘].[’ + t.name + ‘]’ AS fulltable_name, SCHEMA_NAME(t.schema_id) AS schema_name, t.name AS table_name, i.rows FROM sys.tables AS t INNER JOIN sys.sysindexes AS i ON t.object_id = i.id AND i.indid < 2 WHERE (ROWS> 0) AND (t.name NOT LIKE ‘syscolumns’) AND (t.name NOT LIKE ‘syscomments’) AND (t.name NOT LIKE ‘sysconstraints’) AND (t.name NOT LIKE ‘sysdepends’) AND (t.name NOT LIKE ‘sysfilegroups’) AND (t.name NOT LIKE ‘sysfiles’) AND (t.name NOT LIKE ‘sysforeignkeys’) AND (t.name NOT LIKE ‘sysfulltextcatalogs’) AND (t.name NOT LIKE ‘sysindexes’) AND (t.name NOT LIKE ‘sysindexkeys’) AND (t.name NOT LIKE ‘sysmembers’) AND (t.name NOT LIKE ‘sysobjects’) AND (t.name NOT LIKE ‘syspermissions’) AND (t.name NOT LIKE ‘sysprotects’) AND (t.name NOT LIKE ‘sysreferences’) AND (t.name NOT LIKE ‘systypes’) AND (t.name NOT LIKE ‘sysusers’) ORDER BY TABLE_NAME;
列名搜索SELECT * FROM INFORMATION_SCHEMA.COLUMNS WHERE COLUMN_NAME like ‘%password%’
列出非默认列SELECT * FROM INFORMATION_SCHEMA.COLUMNS WHERE CHARACTER_MAXIMUM_LENGTH > 14 AND DATA_TYPE NOT IN (‘bigint’,‘binary’,‘bit’,‘cursor’,‘date’,‘datetime’,‘datetime2’, ‘datetimeoffset’,‘float’,‘geography’,‘hierarchyid’,‘image’,‘int’,‘money’,‘real’, ‘smalldatetime’,‘smallint’,‘smallmoney’,‘sql_variant’,‘table’,‘time’,‘timestamp’, ‘tinyint’,‘uniqueidentifier’,‘varbinary’,‘xml’) AND TABLE_NAME=‘CreditCard’ OR CHARACTER_MAXIMUM_LENGTH < 1 AND DATA_TYPE NOT IN ( ‘bigint’, ‘binary’, ‘bit’, ‘cursor’, ‘date’, ‘datetime’, ‘datetime2’, ‘datetimeoffset’, ‘float’, ‘geography’, ‘hierarchyid’, ‘image’, ‘int’, ‘money’, ‘real’, ‘smalldatetime’, ‘smallint’, ‘smallmoney’, ‘sql_variant’, ‘table’, ‘time’, ‘timestamp’, ‘tinyint’, ‘uniqueidentifier’, ‘varbinary’, ‘xml’) AND TABLE_NAME=‘CreditCard’ ORDER BY COLUMN_NAME;

数据定位正则表达式

描述正则表达式
所有主要的信用卡提供商^(?: 4 [0-9] {12}(:[0-9] {3})| (:???5 [1-5] [0-9] {2} | 222 [1-9 ] | 22 [3-9] [0-9] | 2 [3-6] [0-9] {2} | 27 [01] [0-9] | 2720)[0-9] {12} | 3 [47] [0-9] {13} | 3(:0 [0-5] | [68] [0-9])[0-9] {11} | 6(?:011 | 5 0-9] {2})[0-9] {12} | (?:2131 | 1800 | 35 \ d {3})\ d {11})$ |
Unmasked | Masked SSN^(\d{3}-?\d{2}-?\d{4}|XXX-XX-XXXX)$

数据定位关键字

关键词
credit
card
pin
cvv
pan
password
social
ssn
account
confidential
  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值