[Snort-users] [Snort-sigs] Snort rules

Graham Bignell graham at ritual.co
Wed Jun 5 09:02:50 EDT 2019


Hello Gururaja,

What's your goal?
(Start by getting your rules subscription set up and tuned for the services
you are protecting.)

If you want to build a UBEA pipeline one can be cobbled together with an
event stream or queue and the python ML tools.
Some background is here:  https://arxiv.org/pdf/1710.04843v2.pdf

//Graham

On Tue, Jun 4, 2019 at 12:20 PM Gururaja Padmavathi devi via Snort-sigs <
snort-sigs at lists.snort.org> wrote:

> Hi,
>
> Is there a way where in one can update the snort rules by running a
> machine learning algorithm? Pls let me know if there is such a software
> present.
>
> Thank you,
> Gururaja Pn
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.snort.org
> https://lists.snort.org/mailman/listinfo/snort-sigs
>
> Please visit http://blog.snort.org for the latest news about Snort!
>
> Please follow these rules:
> https://snort.org/faq/what-is-the-mailing-list-etiquette
>
> Visit the Snort.org to subscribe to the official Snort ruleset, make sure
> to stay up to date to catch the most <a href="
> https://snort.org/downloads/#rule-downloads">emerging threats</a>!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20190605/8213ad3c/attachment.html>


More information about the Snort-users mailing list