Runtime sensitive-object identification

Runtime sensitive-object identification processes response data looking for predefined patterns that match personally-identifiable and other sensitive information.

About this task

Runtime sensitive-object identification matches user-selectable patterns for data such as credit card numbers, international bank numbers, email addresses, and personal identification numbers for various countries. This procedure describes how to select the patterns to match, enable runtime sensitive-object identification, and review the results.

Procedure

  1. Confirm that Inspect returned data is enabled on the Inspection engine configuration page.
    For more information, see Inspection engine configuration.
  2. Review and select sensitive-object patterns to match.
    1. Using the Group builder, edit the Installed RSOI patterns group.
      The Members tab lists the patterns being used for runtime sensitive-object identification.
    2. Select and remove any patterns you do not want to use.
      For example, a company operating in Brazil may not need to monitor for United States social security numbers.
      Note: In an environment with a central manager, changes made to this group from the central manager are not immediately reflected on managed units. Either wait until the managed units are updated or manually push the changes from the Central management page.
  3. Enable runtime sensitive-object identification using the following CLI command: store runtime_sensitive_object_identifier on
  4. View results using the Runtime Sensitive Object Identifier report.

What to do next

If you notice too many false positives in the Runtime sensitive object identifier report, consider the following actions:
  • Use the store runtime_sensitive_object_identifier_hits or store runtime_sensitive_object_identifier_hits_with_signature CLI commands to increase the number of hits required to include a match in the results.
  • Remove the pattern with too many false positives from the Installed RSOI patterns group.