1. A dynamic data masking method comprising: intercepting data derived by a computer-hosted database management system from a database, wherein the data are intercepted when the data are found within a data stream created by the database management system for delivery to a computer-hosted application, and wherein the intercepted data are in a non-tabular format; creating a tabular representation of the intercepted data; and masking any of the data in accordance with a masking policy that specifies which of the data in the tabular representation of the intercepted data are to be masked if a masking condition is met, wherein the masking condition references the tabular representation of the intercepted data using a tabular positional reference that refers to any of a row and a column of the tabular representation of the intercepted data.