On Jul 3, 2013, at 4:53 PM, Matthias Vallentin <[email protected]> wrote:
> Very useful to know! I was about to offer a student to investigate the > efficacy of libinjection, but given the high FPs, I am less excited > about it. Do you think it's possible to improve on the FP rate or is > the "model" hardcoded in the library? I don't know, the false hits make me believe it's a failing in their model, but I don't really understand how it works so I can't say that authoritatively. .Seth -- Seth Hall International Computer Science Institute (Bro) because everyone has a network http://www.bro.org/ _______________________________________________ bro-dev mailing list [email protected] http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
