[Bro-Dev] [Bro-Commits] [git/bro] topic/seth/libinjection: Integration with libinjection (https://github.com/client9/libinjection) (9ee6dff)

Seth Hall seth at icir.org
Wed Jul 3 14:25:00 PDT 2013


On Jul 3, 2013, at 4:53 PM, Matthias Vallentin <vallentin at icir.org> wrote:

> Very useful to know! I was about to offer a student to investigate the
> efficacy of libinjection, but given the high FPs, I am less excited
> about it. Do you think it's possible to improve on the FP rate or is
> the "model" hardcoded in the library?


I don't know, the false hits make me believe it's a failing in their model, but I don't really understand how it works so I can't say that authoritatively.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the bro-dev mailing list