[Bro] Are there any machine learning functionality in Bro?

Martin Holste mcholste at gmail.com
Wed Jun 13 07:56:45 PDT 2012


You know a project is awesome when a response indicating that a
feature isn't available is accompanied by a full paper on it.

On Wed, Jun 13, 2012 at 9:45 AM, Robin Sommer <robin at icir.org> wrote:
>
> On Wed, Jun 13, 2012 at 09:56 +0200, Roger Larsen - H�gskolen i Gj�vik wrote:
>
>> Threshold Random Walk algorithm (TRW).
>
> (TRW doesn't use machine learning.)
>
>> Are the learning capabilities in Bro well hidden – or missing?
>
> Missing. Not by design, but out of operational concerns: it's
> extremely hard to get ML approaches to work reliably. You may be
> interested in this paper we wrote a little while ago on this topic:
>
>    http://www.icir.org/robin/papers/oakland10-ml.pdf
>
> Robin
>
> --
> Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
> ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro




More information about the Bro mailing list