Pattern Matching
A detection method that identifies the typical structure of keys based on regular expressions or heuristic rules, used as the first layer of sensitive-information filtering in log storage paths.
Timeline (last 90 days)
Shape matching relies on regular expressions or heuristic rules to identify the typical structure of keys, such as the `AKIA` prefix of AWS access keys, the `ghp_` prefix of GitHub tokens, and the three-part base64 structure of JWTs.
The fundamental flaw of shape matching is that it can only identify known formats with distinctive features; high-entropy random strings without a fixed prefix are hard to distinguish from ordinary text, and URLs carrying tokens often escape the rules because their parameter names are non-standard.
All Facts (2)
Shape matching relies on regular expressions or heuristic rules to identify the typical structure of keys, such as the `AKIA` prefix of AWS access keys, the `ghp_` prefix of GitHub tokens, and the three-part base64 structure of JWTs.
50%UnverifiedThe fundamental flaw of shape matching is that it can only identify known formats with distinctive features; high-entropy random strings without a fixed prefix are hard to distinguish from ordinary text, and URLs carrying tokens often escape the rules because their parameter names are non-standard.
50%