Exact Data Match

Exact Data Match (EDM) is an optional add-on feature available under Cyberhaven's Advanced Content Inspection license.

The EDM feature enhances Cyberhaven's content inspection capabilities by enabling you to accurately identify specific data. This feature is particularly useful for locating sensitive information such as bank account numbers (BAN), credit card numbers (CCN), social security numbers (SSN), or medical record numbers (MRN) within your data streams. EDM offers an advanced alternative to traditional pattern matching.

EDM leverages the unique attributes of your sensitive data to detect it with high precision, which is a key advantage of using EDM over pattern matching. It ensures a definite match and substantially reduces the incidence of false positives.

For example, take a multinational financial corporation tasked with safeguarding sensitive client data across various geographies. Using simple pattern matching, they might search for sequences resembling U.S. Social Security Numbers (SSNs) formatted as XXX-XX-XXXX. However, this approach may lead to false positives due to the potential overlap with tax identification numbers in other countries that share a similar format. Pattern matching cannot distinguish between SSNs and non-U.S. tax IDs that fit the same pattern.

In contrast, EDM relies on the unique characteristics of each SSN. Using EDM you can monitor specific SSNs within your data flow, such as '123-45-6789' which significantly minimizes the risk of false positives.

With EDM, you can quickly identify the precise data and prevent data exfiltration.

How does EDM work?

The EDM feature utilizes the hashed version of the sensitive data that you have provided and monitors your data traffic to detect a matching hashed value. This feature consists of the following two components.