[Bro-Dev] [Bro-Commits] [git/bro] topic/seth/libinjection: Integration with libinjection (https://github.com/client9/libinjection) (9ee6dff)
Seth Hall
seth at icir.org
Wed Jul 3 14:25:00 PDT 2013
On Jul 3, 2013, at 4:53 PM, Matthias Vallentin <vallentin at icir.org> wrote:
> Very useful to know! I was about to offer a student to investigate the
> efficacy of libinjection, but given the high FPs, I am less excited
> about it. Do you think it's possible to improve on the FP rate or is
> the "model" hardcoded in the library?
I don't know, the false hits make me believe it's a failing in their model, but I don't really understand how it works so I can't say that authoritatively.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
More information about the bro-dev
mailing list