DMS provides more than 100 built-in detection models covering common sensitive data types — names, monetary values, bank card numbers, and ID card numbers. When the built-in models don't cover your data, create custom models using regular expressions.
Usage notes
Detection model names must be unique.
Built-in detection models are read-only and cannot be modified.
Built-in and custom detection models can be used together in a data classification template. For more information, see Manage DMS classification and grading templates.
View built-in detection models
Log on to the DMS console V5.0.
-
Move the pointer over the
icon in the upper-left corner and choose . NoteIf you use the DMS console in normal mode, choose in the top navigation bar.
-
Move the pointer over the
icon in the upper-left corner and choose . NoteIf you use the DMS console in normal mode, choose in the top navigation bar.
Move the pointer over the
icon in the upper-left corner and choose All functions > Security and Specifications > Sensitive Data > Rule Configurations.In normal mode, choose Security and Specifications > Sensitive Data > Rule Configurations in the top navigation bar.
Click the Identification Model tab.
Click the Model Source drop-down list, select The built-in, and click Search.
Find the model you want to inspect and click View in the Actions column.
The detail panel shows the model name, match mode, and the content to be matched.
Manage custom detection models
Navigate to the Identification Model tab
Log on to the DMS console V5.0.
In the top navigation bar, choose Security and Specifications > Sensitive Data > Rule Configurations.
In simple mode, move the pointer over the
icon in the upper-left corner and choose All functions > Security and Specifications > Sensitive Data > Rule Configurations.Click the Identification Model tab.
Create a custom detection model
Custom detection models use regular expressions as the matching rule. Before creating a model, prepare a regular expression and test it against sample data to confirm it matches what you expect.
On the Identification Model tab, click Add Custom Identification Model.
In the Add Custom Identification Model panel, configure the following parameters.
Parameter Description Model Name A unique name for the detection model. Rule The matching rule. Set the value to Regular Expression and enter your expression. See Regular expression syntax for supported syntax. Test Data Sample data to validate your expression. Enter representative values and confirm the Test Results field shows The field matches the regular expression before proceeding. Test Results The validation result: The field matches the regular expression or The field does not match the regular expression. Adjust the expression until the result matches your expectation. Description A description of what the model detects. Click Submit.
Regular expression syntax
DMS custom detection models support standard regular expression syntax. The following operators are commonly used:
| Operator | Meaning | Example pattern | Matches |
|---|---|---|---|
+ | One or more of the preceding character | ID-[0-9]+ | ID-1, ID-12345 |
* | Zero or more of the preceding character | emp[0-9]* | emp, emp42 |
? | Zero or one of the preceding character | colou?r | color, colour |
Example — detecting employee IDs: If your organization uses the format F-12345678 for full-time employees and P-87654321 for part-time employees, the expression [FP]-\d{8} matches both formats. Enter a sample ID in Test Data and confirm the result shows The field matches the regular expression before clicking Submit.
Delete a custom detection model
Deletion is permanent. After deleting a custom detection model, DMS can no longer use it to detect sensitive data. Previously detected sensitive data is not affected.
On the Identification Model tab, click the Model Source drop-down list, select Custom, and click Search.
Optionally, enter a model name in the search field before clicking Search to narrow the results.
Find the model you want to remove and click Delete in the Actions column.
In the Prompt dialog, click OK.
Modify a custom detection model
On the Identification Model tab, click the Model Source drop-down list, select Custom, and click Search.
Find the model you want to update and click Modify in the Actions column.
In the Modify Custom Identification Model panel, update the parameters and click Submit.
View a custom detection model
On the Identification Model tab, click the Model Source drop-down list, select Custom, and click Search.
Find the model and click View in the Actions column.
The detail panel shows the model name, match mode, and the content to be matched.
Create a custom detection model from an existing model
Use the Create As feature to duplicate an existing custom model as a starting point for a new one.
On the Identification Model tab, click the Model Source drop-down list, select Custom, and click Search.
Find the model you want to base the new model on and click Create As in the Actions column.
In the Add Custom Identification Model panel, update the Model Name and any other parameters, then click Submit. The model name must be unique.
Use a detection model
Apply built-in or custom detection models in a data classification template to detect sensitive data across your databases. For more information, see Edit a classification and grading template.