![]() ![]() Current implementation includes: ccn, ssn, key, and env which are credit card number, social security number, encryption key, and environment variable respectively. builtin: Includes the built-in scrubbers.regexp: a regular expression defined by the user.name: A human-readable name for a scrubber.Each scrubber is given an id number and consists of the following fields: For example, the following command lists the scrubbers of project "minetest". For more information about how to use morgue, see Morgue. For example, string representations of IP addresses can be scrubbed with the regular expression \. \. \. .Īt this time, management of the scrubbers is handled through the morgue command line utility. Scrubbers that rely on regular expression are applied to any data in the dump that looks like it may be a string. User-defined scrubbers can also be defined using POSIX regular expressions. The offending information is masked and the over-all structure of the file is unmodified in order to ensure that the file can be loaded by your system debugger. If an environment variable scrubber is enabled, all environment variables are scrubbed.Īll personally identifiable information is mutated in-place before committing to disk. There are two primary classes of data scrubbers: built-in scrubbers and regular expression scrubbers. All data contained in the dump including register values, memory and crash attributes is scanned for patterns that may be indicative of personally identifiable information. Developers are able to view these dumps directly in their web browser or download them for the purposes of root cause analysis.ĭata Scrubbers provide administrators the ability to remove sensitive data from dump files submitted to Backtrace before they are committed to disk. When they are submitted to Backtrace server, metadata and attributes are extracted from them and the minidump files are persisted on disk. Minidump files contain raw data of the crashed process which may include sensitive data, such as Personally Identifiable Information (PII). There are mechanisms for both native UNIX core dump formats as well as the minidump format used by Windows, Breakpad, and Crashpad. Backtrace provides several facilities for scrubbing data of personally identifiable information.
0 Comments
Leave a Reply. |