A connection rule defines the connection criteria to identify a connection and the target database. A security rule defines the criteria to parse and rewrite an SQL request. Use security rules to mask data in a specific row or to mask an entire column. For example, you can create a security rule that rewrites SQL requests that reference the Social Security column from the Employee table.