Generic Secrets - Optimizing entropy engine
---
# Interlock Details
#### Executive Summary
Security teams need to detect high entropy strings that don't follow known provider patterns. This will prevent data breaches from the significant number of secrets that current pattern-based scanners miss.
This phase of implementation will include:
* Evaluating the Entropy-based engine to see how it will integrate within the product
* Optimizing the detection accuracy to ensure the POC has an acceptable quality bar to integrate with the product
* Optimizing latency and memory consumption to ensure the integration is performant
*
Three primary components
* literal string extraction improvements
* dataset curation
* latency optimization
Examples:
* "fingerprint": "`19c01cb7157e4645e9e2c863062a85a8cbfbdcda`"
* string public constant fixedMetadataHash = "`QmRad1vxT3soFMNx9j3bBmkABb4C86anY1f5XeonosHy3m`"
* totpSecret: `IFTXE3SPOEYVURT2MRYGI52TKJ4HC3KH`
* localStorage.setItem('token', `'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjp7fX0.bVBhvll6IaeR3aUdoOeyR8YZe2S2DfhGAxTGfd9enLw'`)
* address: `'Xr556RzuwX6hg5EGpkybbv5RanJoZN17kW'`
* return frisby.put(REST_URL + '/continue-code-fixIt/apply/`y28BEPE2k3yRrdz5p6DGqJONnj41n5UEWawYWgBMoVmL79bKZ8Qve0Xl5QLW'`)
* const testResponse = `'3be2e438b7f3d04c89d7749f727bb3bd'`
#### Engineering Assessment
TODO
#### Dependencies
- Team dependencies: ~"group::vulnerability research"
- Epic/Issue dependencies: TODO
- External dependencies: Unknown
#### DRIs
- **PM**: @abellucci
- **EM**: @amarpatel
- **UX/PDM**: TBD
- **Engineering Owner**: @rvider
epic