Generic Secrets - Optimizing entropy engine
--- # Interlock Details #### Executive Summary Security teams need to detect high entropy strings that don't follow known provider patterns. This will prevent data breaches from the significant number of secrets that current pattern-based scanners miss. This phase of implementation will include: * Evaluating the Entropy-based engine to see how it will integrate within the product * Optimizing the detection accuracy to ensure the POC has an acceptable quality bar to integrate with the product * Optimizing latency and memory consumption to ensure the integration is performant * Three primary components * literal string extraction improvements * dataset curation * latency optimization Examples: * "fingerprint": "`19c01cb7157e4645e9e2c863062a85a8cbfbdcda`" * string public constant fixedMetadataHash = "`QmRad1vxT3soFMNx9j3bBmkABb4C86anY1f5XeonosHy3m`" * totpSecret: `IFTXE3SPOEYVURT2MRYGI52TKJ4HC3KH` * localStorage.setItem('token', `'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7fX0.bVBhvll6IaeR3aUdoOeyR8YZe2S2DfhGAxTGfd9enLw'`) * address: `'Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW'` * return frisby.put(REST_URL + '/continue-code-fixIt/apply/`y28BEPE2k3yRrdz5p6DGqJONnj41n5UEWawYWgBMoVmL79bKZ8Qve0Xl5QLW'`) * const testResponse = `'3be2e438b7f3d04c89d7749f727bb3bd'` #### Engineering Assessment TODO #### Dependencies - Team dependencies: ~"group::vulnerability research" - Epic/Issue dependencies: TODO - External dependencies: Unknown #### DRIs - **PM**: @abellucci - **EM**: @amarpatel - **UX/PDM**: TBD - **Engineering Owner**: @rvider
epic