Creating and editing a keyword category

Show all | Hide all

To create or edit a category based on keywords:

1. In the Management Console tree, select the Categories and policies node.
2. Perform one of the following steps:
   • To create a new category of keywords, click the New category button. Then select the Keywords item in the drop-down list.
   • To edit an existing category based on keywords, select it in the list of categories and policies and click the Settings button.

     The Category settings dialog will appear. This window lets you add keywords to a category and specify the category name.

3. Specify values for the following settings:
   • Name

     Category name. The name must differ from the names of other categories.

   • Keyword input field.

     This is a field for entering the keyword or expression according to which messages will be searched for certain text content.

     A keyword is a word or expression that has to be recognized by the application as confidential information that requires protection against leaks. Keywords are enclosed in quotation marks.

     By default, the list of keywords is not case-sensitive. Use the "!" character at the start of the keyword to make it case-sensitive.

     Example: "!Kaspersky Lab"

     The application will detect text content in which words in the "Kaspersky Lab" word combination begin with capital letters while the other letters are lower-case. The text where the case of characters in these words differs from the example (e.g. "kaspersky Lab", "kaspersky lab", or "KASPERSKY LAB") will be skipped.

     A key expression is one or several keywords joined by the operators AND, OR, NEAR, ONEAR.

     Use the AND operator to detect two or more keywords included in the text at the same time.

     The order in which the keywords are enumerated does not affect the search.

     Example: "anti-virus" AND "security".

     The application will detect text content that includes the words “anti-virus” and “security”. Text content that includes only one of these two words will be skipped.

     Use the OR operator to detect one of the keywords or several keywords in the text.

     Example: “security” OR “computer protection”.

     The application will detect text content that includes the key word “security” or the expression “computer protection” or both.

     A line break character in an expression is also recognized as the OR operator. A keyword written in a new line is connected to the previous keyword using the OR operator that is not displayed expressly in this case.

     The NEAR operator is used to detect several keywords separated by several other words in text. Specify the number of words separating the keywords in brackets.

     Example: “security” NEAR(6) “system”.

     The application detects text content that includes the words “security” and “system” that are separated by no more than six words. Words can be separated by blank spaces, line break characters, tab characters, and other characters that are defined in Unicode specifications as blank space characters and punctuation marks.

     The ONEAR operator is used to detect several keywords separated by several other words in text and appearing in the order specified in the expression. Specify the number of words separating the keywords in brackets.

     Example: “protection” ONEAR(4) “privacy”.

     The application detects text content in which the word “privacy” follows the word “protection” and is separated from it by no more than four words. Words can be separated by blank spaces, line break characters, tab characters, and other characters that are defined in Unicode specifications as blank space characters and punctuation marks.

     You can create complex expressions that contain several operators. Use round brackets to specify the priority of operators in an expression.

     Example: ((“technologies” OR “security”) ONEAR(0) “!Kaspersky”) AND “2014”.

     The application detects text content that includes the number 2014 and the word “Kaspersky” that immediately follows the word “technologies” or the word “security”.

     Such expressions as “term1” NEAR(n) (“term2” AND “term3”) and “term1” NEAR(n) (“term2” NEAR(m) “term3”) are not supported. The result of processing of such expressions is unknown due to uncertainty that arises when the brackets are expanded. The combined length of expressions with keywords in all categories based on keywords may not exceed 480,000 characters.

   • Comments

     Additional information pertaining to data in the category, for example, a link to a document that regulates the information security rules in the organization.

4. Click OK to save the changes.

The new or modified category of key terms appears in the list of categories and policies.

In order for the application to start using a new or modified category of key terms in Data Leak Prevention, you have to create a policy on the basis of the category.