Create Custom Advanced Patterns using Skyhigh Built-In Advanced Patterns

Last updated
Save as PDF

Create a custom advanced pattern using Skyhigh Built-In advanced pattern to meet your data protection needs. For example, if you need to protect sensitive personal information using the Skyhigh Social Security Number advanced pattern as your basis, but you want to apply validation algorithms to regular expressions based on your organizational needs.

To create Custom Advanced Patterns using Skyhigh Security Built-in Advanced Patterns:

Go to Policy > DLP Policies > Classifications.
Click Actions > Create Classification.
Classification Name. Enter a name for this classification. For example, Social Security Number. Enter an optional description to describe its use or purpose.
Category. Select a Category from the list. For example, Sensitive.
Conditions. Click Select Criteria and choose Advanced Pattern. The Select Advanced Patterns cloud card displays.
- Count each match string only one time. Activate or deactivate the checkbox to count the match string only one time or multiple times. Activating the checkbox eliminates the duplicate match counts during the DLP Policy evaluation.
On the Select Advanced Patterns Cloud Card, click i corresponding to the Skyhigh Security Built-in Advanced Patterns from the list. For example, US Social Security Number.
You can now view the Regular Expressions for the selected Advanced Patterns displayed on the second side panel. Click Usage to see if the selected Advanced Pattern is being used in other classifications.
Click the three-dots menu and click Clone.
A new custom advanced pattern is created named US Social Security Number (Copy). You can rename the custom advanced pattern to suit your use case.
Click Save.
The Skyhigh Built-In clone is now added to the Advanced Pattern and Classification list.
On the Select Advanced Patterns cloud card, select the newly created custom advanced pattern from the list.
Click i to view the Regular Expressions for the selected Advanced Patterns displayed on the second side panel.
Click No Validation corresponding to the regular expression to open the Validation Algorithm cloud card.
Select the appropriate Validation Algorithm from the list and click Done. For example, Luhn10 With BIN Validation. To add Luhn 10 Validation Algorithm and BINs for your custom regular expressions, click Add BIN Validator. For more details, see Add BIN Validator.
Add a Score to weigh the new regex Advanced Pattern. Scores can be between negative or positive, -99 to 999. The higher the number, the greater the weight given to the keyword, which will exceed the threshold and trigger an incident.
To reduce false positives, add expressions in the Exceptions tab to exclude specific keywords or regular expressions from being processed as matches in DLP classifications.
Click Save.
Optionally, you can edit the threshold by clicking [1]. Enter a number to indicate the weight of the Advanced Pattern in threshold matching.
Add more classification conditions as needed and click Save.

Your custom classification with Skyhigh built-in advanced patterns and validation are saved to the selected category in the Classifications list. Add the classification to your DLP policies as needed.