RegEx Summary

Regular Expression Section Summary

In this section we found that while regular expressions can be highly sensitive but not necessarily very specific which can lead to a large amount of false positives in many environments. Regular expressions will perform best where the format of the data being scanned is known and the expressions can be tailored to avoid false positives.

Key Points

  1. Regular expressions are an industry-standard way of pattern matching.
  2. Many DLP functions that are built into SaaS and IaaS are limited to only regular expressions, which can produce an undesired amount of false positives in some environments
  3. Skyhigh DLP provides methods to augment Regular Expressions with features like boolean logic and dictionaries to decrease false positives (increasing overall effectiveness). We’ll cover these more in the next section!