Threat Level: green Handler on Duty: Russ McRee

SANS ISC: New DShield Feature: Highly Predictive Blacklists. - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
New DShield Feature: Highly Predictive Blacklists.
I am happy to announce an exciting new feature to DShield submitters. Based on some research done by SRI International, we came up with an algorithm to create better blacklists.

The short one paragraph summary: The algorithm compares your submissions to others and finds groups of similar submitters. Next, it will generate blacklists based on how close you are to these other submitters.

In other simulations, these blacklists have been far superior to regular "global worst offender" or "local worst offender" lists.

For details, see http://www.dshield.org/hpbinfo.html

I will be teaching next: Intrusion Detection In-Depth - SANS Boston Summer 2019

Johannes

3575 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!