Viewing Fingerprint List
All fingerprint classifications that exist in the database are listed in the console tree under DeviceLock Enterprise Server > Digital Fingerprints > Fingerprints Database. To view the fingerprints attributed to a certain classification, select that classification in the console tree, under Fingerprints Database.
The details pane lists the fingerprints, with the following details provided on each one:
•Name - The name that identifies the fingerprint. When adding the fingerprint of a file to the database, the server assigns it the name of that file.
Note: A record in parentheses following the name of the fingerprint that was added by hand identifies who and from what computer added that fingerprint (see also
Adding Fingerprints Manually). |
•Conformity (%) - The percentage of fingerprint elements (hashes) that conform to the selected classification.
Some elements of a fingerprint may be part of other fingerprints that belong to lower-level classifications. For example, a fingerprint placed into the “Secret” classification can be sourced from a document where just a part of which serves as a source of another fingerprint belonging to the classification “Unclassified”. In this case, some elements of the “Secret” fingerprint will be attributed to the classification “Unclassified”. Since elements attributed to a lower-level classification are not considered to conform to a higher-level classification, the Conformity value could be less than 100%.
Note: When calculating the Conformity value, the hashes of all versions of the fingerprint are evaluated. As a result, this value for a particular version of the fingerprint (for example, for its latest version) may be higher than for the entire fingerprint. |
•Date added - The date and time that the fingerprint is initially created.
•Date updated - The date and time that the fingerprint is last updated.
Updating a fingerprint occurs every time a new version and/or a new source of the fingerprint is added.
•Versions - The number of versions of this fingerprint that exist in the database.
•Sources - The total number of registered sources of this fingerprint, with the number of “active” sources indicated in parentheses. A source is considered active if it exists (has not been deleted, moved or renamed) and is scanned by some fingerprinting task on a regular basis.
•Source type - The type of the fingerprint source:
•Text - The source holds solely text content (for example, this is a text file). The fingerprint is taken from the source’s text content.
•Binary - The source holds no text content (for example, this is an image file). The fingerprint is taken from the source’s binary data.
•Text/Binary - The source holds both text and binary content (for example, this is a Microsoft Word document or .pdf file). The fingerprint is taken from each content type separately.
•Size - The size of this fingerprint in the database.
•Frequency matching - The counter showing how many times this fingerprint triggered when inspecting content using fingerprint-based rules.
This counter is incremented by one in any of the following occurrences:
•A rule with the Exact file match parameter enabled detects that the check sum of the inspected content matches the check sum of the given fingerprint’s source file.
Note: The rule may not trigger if its classification has no elements of the given fingerprint (the fingerprint has the Conformity value of zero in this classification). Nonetheless, if the check sums match, the counter is incremented by one for the classification containing that fingerprint. |
•A rule with the Threshold setting specified (the Exact file match parameter is disabled) detects any of the following cases:
•The match percentage of the given fingerprint with the inspected content exceeds the value of the
Versioning threshold for text or
Versioning threshold for binary parameter (see
Fingerprinting Options).
•This fingerprint to the most extent matches the inspected content by the number of matching elements (hashes) in comparison with other fingerprints available in the database.
In either case, the counter is incremented by one regardless of whether the content inspection rule has triggered.
Note: In any of the occurrences listed above, the counter is incremented within all classifications to which the fingerprint conforms. |
•Effectiveness - The percentage showing how many times this fingerprint triggered when inspecting content using fingerprint-based rules, as compared to the total number of times the fingerprints from this classification triggered.
The shortcut menu on a classification in the console tree provides the following commands:
•Add fingerprint - Select the information sample, such as a document or file, of which the fingerprint needs to be taken. The fingerprint of the selected sample will be added to the classification for which this command is performed (see
Adding Fingerprints Manually).
•Refresh - Update the fingerprint list of the selected classification with the latest data. This command does not update detailed information shown under the fingerprint list. To update the information about a particular fingerprint, use the Refresh command on that fingerprint in the details pane.
The shortcut menu on a fingerprint in the details pane provides the following commands:
•Add fingerprint - Same as on the classification in the console tree.
•Remove fingerprint - Delete the fingerprint on which this command is performed.
The Remove fingerprints command that appears in case of a selection of two or more fingerprints provides the ability to delete all the selected fingerprints at a time.
•Refresh - Update the detailed information about the selected fingerprint with the latest data (see
Viewing Detailed Fingerprint Information). This command does not update the list of fingerprints in the details pane. To update the fingerprint list of a particular classification, use the
Refresh command on that classification in the console tree.