Thanks to everyone that's been contributing data to the SIDReporter project! I'm just starting to dig the statistical needle out of the haystack, and so far so good. I've put up some static statistics to begin looking at:
http://www.emergingthreats.net/index.php/sidreporter-statistics.html
These will become more interesting the more sites we have reporting, so please consider running the client. It's painless, anonymous, and will contribute to us greatly improving the signature base we all use.
The statistics posted have the dynamic IP lists filtered out, as well as some sigs that aren't really attack relevant. The coloring indicates a signature with more than a 50% change in reporting in the previous period. This should show us some upward and downward movers.
These are static, generated daily for now. Once we figure out the models that mean something to us I'll get them into a dynamically generated form with charts and graphs which contributors will have access to.
A reminder: only active contributors will have access to the more in depth analysis and reporting tools that result from this data. So hop into the mix now to have your say as to how we develop those!
You can find more information about SIDReporter here:
http://doc.emergingthreats.net/bin/view/Main/SidReporter
Matt
| < Prev | Next > |
|---|
