[Bro] Are there any machine learning functionality in Bro?
Robin Sommer
robin at icir.org
Wed Jun 13 07:45:01 PDT 2012
On Wed, Jun 13, 2012 at 09:56 +0200, Roger Larsen - H�gskolen i Gj�vik wrote:
> Threshold Random Walk algorithm (TRW).
(TRW doesn't use machine learning.)
> Are the learning capabilities in Bro well hidden or missing?
Missing. Not by design, but out of operational concerns: it's
extremely hard to get ML approaches to work reliably. You may be
interested in this paper we wrote a little while ago on this topic:
http://www.icir.org/robin/papers/oakland10-ml.pdf
Robin
--
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the Bro
mailing list