RegEx Summary

Regular Expression Section Summary

In this section, we found that while regular expressions can be highly sensitive, they are not necessarily very specific, which can lead to a large number of false positives in many environments. Regular expressions perform best when the format of the data being scanned is known, and the expressions can be tailored to avoid false positives.

Key Points

1. Regular expressions are an industry-standard way of pattern matching.
2. Many DLP functions built into SaaS and IaaS are limited to only regular expressions, which can produce an undesired number of false positives in some environments.
3. Skyhigh DLP provides methods to augment regular expressions with features like boolean logic and dictionaries to decrease false positives, increasing overall effectiveness. We’ll cover these more in the next section!