-----Original Message-----
From: Pete McNeil [mailto:[EMAIL PROTECTED] 

I've actually been thinking very strongly of reorganizing the rule group IDs
recently. Especially in light of the new changes we've made with robots et
al. The accuracy of the Experimental IP group has gone up considerably - and
most of the false positives you've discussed should be eliminated over time
(bounces especially).

All that said, I think the first step to reordering the groups might be to
change the sequence of the 4 highest numbers as follows:

63: Experimental Received [IP]
62: Obfuscation
61: Experimental Abstract
60: General

This order is based on a least to most specific order. It turns out that the
majority of General rules are simply specific patterns that don't fit
existing rule groups; Experimental Abstract tend to be either abstracted
patterns from specific or general patterns - or automatically generated URI
candidates; Obfuscation are patterns that detect obfuscation techniques that
are not specific to any particular kind of spam, and since Received [IP]
rules only identify a source they are the most generalized (whether manually
or automatically generated).

According to a recent spam test quality analysis the accuracy and coverage
for these groups in this order follows like this:

63: Experimental Received [IP]    SA = 0.81 Coverage =  7.63%
62: Obfuscation                   SA = 1.00 Coverage =  2.58%
61: Experimental Abstract         SA = 0.92 Coverage = 25.82%
60: General                       SA = 0.81 Coverage =  1.82%

How would you feel about this order?

++++++++++

I'm not Matt, but I very much like this idea.  Please let us know when you
plan to make this change so we can adjust our tests accordingly.

Thanks!

Bill

-------------------------------------------------------------------------------
This message and any included attachments are from Siemens Medical Solutions 
USA, Inc. and are intended only for the addressee(s).  
The information contained herein may include trade secrets or privileged or 
otherwise confidential information.  Unauthorized review, forwarding, printing, 
copying, distributing, or using such information is strictly prohibited and may 
be unlawful.  If you received this message in error, or have reason to believe 
you are not authorized to receive it, please promptly delete this message and 
notify the sender by e-mail with a copy to [EMAIL PROTECTED] 

Thank you

This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html

Reply via email to