Security

Masking credit cards

cjs226
Explorer

While I'm able to mask 16 digit numbers I would like a more sophisticated approach as there are some numbers in that range that are not credit card numbers which I don't want to mask, such as error codes. Is anyone utilizing the Luhn Algorithm (http://rosettacode.org/wiki/Luhn_test_of_credit_card_numbers) or something better than my current approach?

Tags (3)
0 Karma

sachol
Engager

from that site, they can either use a masking tool with a canned CCN mask:

or generate CCNs with a test data generator (using Luhn), but again, external to Splunk:

0 Karma

MicroAlpha
Explorer

southeringtonp
Motivator

Splunk by itself is only going to be able to mask based on regex replacement, but that doesn't necessarily mean any 16-digit string.

If you want to fully run the Luhn algorithm, you'd need to be using a scripted input to Splunk, or have some external form of pre-processing.

cjs226
Explorer

Thanks, I'm using the info from the first link you mention but the 2nd won't work (completely) for me as I have to account for different and yet to be determined credit card companies. This is why I'm hoping for a solution that incorporates the Lunh Algorithm or a better approach.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...