DMS expands the sensitive data detection feature by adding more built-in detection models and supporting custom detection models. You can build dedicated sensitive data detection capabilities by using built-in and custom detection models. This topic describes how to view built-in detection models and how to create, modify, and delete a custom detection model.

Usage notes

  • The name of a detection model must be unique.
  • You can view built-in detection models but cannot modify them.
  • You can use built-in and custom detection models in data classification templates at the same time. For more information about data classification templates, see Manage DMS classification and grading templates.

Description

The built-in detection models can meet the basic requirements for detecting sensitive data, such as names, money, bank card numbers, and ID card numbers. If you have more requirements for sensitive data detection, you can manually add a custom detection model. For more information, see Manage custom detection models.

View built-in detection models

The sensitive data detection feature provides more than 100 built-in detection models. If the built-in detection models cannot meet your business requirements, you can create custom detection models. For more information, see Manage custom detection models.

  1. Log on to the DMS console V5.0.
  2. In the top navigation bar, choose Security and Specifications > Sensitive Data > Rule Configurations.
  3. Click the Identification Model tab.
  4. Click the Model Source drop-down list and select The built-in.
  5. Click Search.
  6. Find the built-in detection model that you want to view and click View in the Actions column. View the details of the detection model, such as the model name, match mode, and the content to be matched.

Manage custom detection models

  1. Log on to the DMS console V5.0.
  2. In the top navigation bar, choose Security and Specifications > Sensitive Data > Rule Configurations.
  3. Click the Identification Model tab.
  4. On the Identification Model tab, perform the following operations based on your business requirements.
    • Create a custom detection model
      1. Click Add Custom Identification Model.
      2. In the Add Custom Identification Model panel, configure the parameters as required. The following table describes the parameters.
        ParameterDescription
        Model NameThe name of the detection model.
        RuleThe sensitive data detection rule. Set the value to Regular Expression. You can configure this parameter by referring to the following examples:
        • Exampleoo+a specifies that data, such as Exampleooa, Exampleoooa, and Exampleooooooa, is identified as sensitive. The plus sign (+) indicates one or more repetitions of the preceding character.
        • Exampleoo*a specifies that data, such as Exampleoa, Exampleooa, and Exampleooooooa, is identified as sensitive. The asterisk (*) indicates zero or more repetitions of the preceding character.
        • Exampleo?a specifies that data, such as Examplea and Exampleoa, is identified as sensitive. The question mark (?) indicates zero or one repetition of the preceding character.
        Test DataThe test data.
        Test ResultsIndicates whether the test data matches the regular expression that you configure. Valid values:
        • The field matches the regular expression
        • The field does not match the regular expression
        DescriptionThe description of the detection model.
      3. Click Submit.
    • Delete a custom detection model
      1. Click the Model Source drop-down list and select Custom.
      2. Click Search or enter a model name in the search field and then click Search.
      3. Find the custom detection model that you want to delete and click Delete in the Actions column.
      4. In the Prompt message, click OK.
        Important
        • Delete a custom detection model with caution. After you delete a custom detection model, DMS cannot use this model to detect sensitive data.
        • After you delete a custom detection model, the sensitive data that was detected based on the model is not affected.
    • Modify a custom identification model
      1. Click the Model Source drop-down list and select Custom.
      2. Click Search.
      3. Find the custom detection model that you want to modify and click Modify in the Actions column.
      4. In the Modify Custom Identification Model panel, modify the parameters of the detection model and click Submit.
    • View a custom detection model
      1. Click the Model Source drop-down list and select Custom.
      2. Click Search.
      3. Find the custom detection model that you want to view and click View in the Actions column. View the details of the detection model, such as the model name, match mode, and the content to be matched.
    • Create a custom detection model from an existing model

      You can use the Create As feature to create a custom detection model from an existing model.

      1. Click the Model Source drop-down list and select Custom.
      2. Click Search.
      3. Find the custom detection model based on which you want to create another model and click Create As in the Actions column.
      4. In the Add Custom Identification Model panel, modify the parameters such as Model Name and click Submit. Make sure that the model name is unique.

Use a detection model

You can use built-in or custom detection models in a data classification template to detect sensitive data. For more information, see Edit a classification and grading template.