[Asrg] differential confidence
Dave CROCKER
dhc at dcrocker.net
Thu Dec 4 10:30:05 PST 2008
Chris Lewis wrote:
> Each of the numbers is
> scaled differently in a computation something like this:
>
> if (((complaints * cf + contentblocked * bf + trap * tf) / non-blocked)
>> 1) {
> go block the IP
> }
>
> [Notice that we're not factoring in blocked IP. Specifically to avoid
> the thresholder locking up thru positive feedback ;-). They're blocked
> anyway, so it doesn't matter.]
>
> Where cf, bf, and tf are chosen thru experience and experimentation.
Relative to my question, what you've said is that you have a scaling factor
specifically for the TIS hits. That lets you tune its specific confidence level.
But you don't cite any of the "good" attributes, nevermind scaling factors, per
your reference to good/bad.
I'm being pedantic because it was the differential nature of postive vs.
negative measurements that intrigued me, in terms of practical impact.
d/
--
Dave Crocker
Brandenburg InternetWorking
bbiw.net
More information about the Asrg
mailing list