Discovery Rule Configuration

Prerequisites

When creating a sensitive data discovery rule with the discovery type set to Dictionary-based Discovery, you need to use either built-in or newly configured dictionary categories and dictionaries from Rule Management > Discovery Dictionary.

Adding Discovery Rules

1. Logging in to the Database Operations and Maintenance Management System using the sysadmin system administrator account.
2. On the left navigation bar, select Rule Management > Sensitive Data Rules, and the page displays the data domain tree list.
3. Select a data domain and click the + icon to pop up the Add Discovery Rule window.
   Figure 1 Adding iscovery rules
   

4. Enter configuration parameters for the discovery rule item when the discovery method is set to the Field type.
   Figure 2 Adding iscovery rule-field
   

   Table 1 Parameter escription for new discovery rule (discovery method: field)

   Parameter	Description
   Discovery Rule Name	Name of the newly added discovery rule. (Required)
   Data Domain	Specify the data field to which this discovery rule belongs; the system will automatically read the selected data field when adding it.
   Discovery Method	Field. (Required)
   Discovery Rule Type	Regular Expression.
   Regular Expression	Expression details, such as [\w]*age[\w]*. (Required)
   Example	The field format that can be detected by this discovery rule. Using the above regular expression as an example, fields such as age and my_age can be identified by this rule. (Required)
   Testing	Check whether the entered content matches the above regular expression.
   Notes	Supplementary information for the discovery rule.
   Default Rule	A radio button. Selecting Yes sets this discovery rule as the default rule for the current data domain.

5. Click OK.
6. Enter configuration information of the discovery rule item when the discovery method is set to the Data type.
   Figure 3 Adding iscovery rule-data
   

   Table 2 Parameter escription for new discovery rule (discovery method: data)

   Parameter	Description
   Discovery Rule Name	Name of the newly added discovery rule. (Required)
   Data Domian	Specify the data field to which this discovery rule belongs; the system will automatically read the selected data field when adding it.
   Discovery Method	Data. (Required)
   Discovery Rule Type	When the discovery method is data-based, there are three types of discovery rules: regular expressions, custom methods, and dictionary-based discovery. Regular Expression: Use regular expression rules to discover data. Custom method: Use the systems built-in Java methods to discover data. Dictionary Classification: Discover data by leveraging the content of the dictionary repository and matching methods.
   Regular Expression	When the rule type is selected as Regular Expression, this field contains a regular expression. (Required) When the rule type is selected as Custom Method, this is the expression for a Java method. (Required) When the rule type is selected as Dictionary Discovery, this field displays the Dictionary Classification (Discovery Dictionary Library) dropdown option. (Required)
   Matching Method	This item is displayed only when the rule type is Dictionary Discovery, and it provides four matching options: include, equal, left match, and right match. (Required) Example: Dictionary classification by province: Liaoning Includes: data that matches the format XXXX Liaoning XXXX. Equal to: Only matches Liaoning. Left match: Matches entries starting with Liaoning, such as Liaoning XXXXXXX. Right match: Matches entries ending with Liaoning, such as XXXXXX Liaoning.
   Example	The field format that can be detected by this discovery rule. (Required)
   Testing	Check whether the entered content matches the above regular expression.
   Notes	Note information for the rule discovery.
   Default Rule	Radio button. Selecting Yes configures the current discovery rule as the default one under the corresponding data domain. NOTE: A data field has a default discovery rule. When the system uses the discovery rules for a data field, it prioritizes the default rule.

Related Operations

You can perform the following operations on the Sensitive Data Discovery Rule page as required later:

• View: Select a data field and click the expand button before the data field name. Click the discovery rule name. Detailed information about the discovery rule will appear on the right side of the page.
• Quickly set as default: Select a data field and click the expand button before the field name. Choose a discovery rule, then click the Default button. You can designate this discovery rule as the default rule as needed; once the current rule becomes the default, all other rules automatically become non-default rules.
• Edit: Select a data field and click the expand button before the data field name. Click the discovery rule name. Detailed information for the discovery rule will appear on the right side of the page. Click the Edit button on the right page to modify the discovery rule information as needed. Click OK.
• Delete: Select a data field and click the expand button before the data field name. Select a discovery rule. Click the Trash icon. You can delete discovery rule information as needed.

• A data field has a default discovery rule. When the system uses the discovery rules for a data field, it prioritizes the default rule.
• The built-in discovery rules cannot be deleted. A five-pointed star icon appears after the rule name to indicate that it is a built-in rule.
• When the built-in discovery rule is in edit mode, you can only modify its default rule status; other rule information cannot be modified or saved.