Re: Listing for multiple virus scanners

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

craig carriere wrote:
> I find the listing of spam rules hit and their
frequency to be of great
> benefit in deciding the usefulness of new rule sets.

Then you'll like what I've got cooking for 1.1  
Essentially the
performance of each individual rule will be tracked and used
to
automatically "rebalance" its score accordingly.


> I also like the
> listing of viruses found and wondered if it would be of
any value to
> include information regarding the virus scanner which
detected the
> virus?

It's worth opening up a new enhancement ticket, sure.

The biggest problem I've encountered with using multiple
virus scanners
is the need to manage the virus aliases, since every scanner
reports
virus names differently.  Maia provides a virus alias
manager for this
purpose, but it's still something that needs to be managed
by hand--not
a big deal for a handful of malware names, but a real pain
when you
start looking at tens of thousands of names.

The upshot is that generating useful statistics gets harder
when you've
got multiple virus scanners, each recording viruses under
different
names.  There's duplication in there, such that you may see
500
instances of Virus X and 200 instances of Virus Y, only to
later
discover that they're really the same thing.  e.g. Scanner X
is your
primary, but it didn't have a signature for Virus X
initially, so it
fell through to Scanner Y, which recorded it as Virus Y. 
Then when
Scanner X finally got its signature, it started recording it
as Virus X
from then on.

- --
Robert LeBlanc <rjlrenaissoft.com>
Renaissoft, Inc.
Maia Mailguard <http://www.maiamail
guard.com/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGCtThGmqOER2NHewRAmbaAJ9bS69MAD7NO+Je6qsduIyFBchd0gCg
gu58
0zkGPC9i7I+Ox8p3gh/tVqg=
=nJGq
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users