[Bro] statistical functions

David Mandelberg dmandelb at bbn.com
Mon Mar 25 12:57:43 PDT 2013


Hi,

Is anybody interested in or planning to add statistical functions from
boost::math to the Bro scripting language?

I'm working on a script that uses the CDF and its complement (SF) for
normal and Poisson distributions to determine if the number of addresses
a host interacts with is anomalous, based on the host's past behavior. I
know it's possible to implement those functions in Bro scripting
language, but it seems like re-inventing the wheel since Boost already
has them.




More information about the Bro mailing list