Justin Mason wrote: > BTW, I think you guys (SARE that is) are using mass-check to measure > accuracy, right?
Yes we have 3 members who test against a corpus using Bobs mass-check script. We plan to use the perceptron when 3.0 is released to score our rules by taking the stock rules into consideration, hoping to make life better for all. > (BTW I should qualify what Daniel means by "non-heavyweight" -- in other > words, the rule doesn't greatly affect speed/RAM usage. I think that's > what he means at least.) That's how I took it, now with the plugin ability I wanted to convert my tripwire ruleset into a plugin, do you see any possible way to do this and use less memory than my current approach? > If we can work something out, that'll be great ;) > I agree, we always wanted to keep things close without crossing lines, those lines are hard to see but each step taken helps define it all. I congradulate you on the great project you have on your hands, I just wish I could offer more valuable help (ie perl coding ;).
