Re: Re: Snort with an expert system

[tol () sics se]

Hi,
Coming late into this conversation, but what about using statistical learning filtering instead of an expert system? We 
have done it using an anomaly detection algorithm we have developed: 

http://eprints.sics.se/3591/ 

(link to paper https://daisy.dsv.su.se/fil/visa?id=24833)

/Tomas
http://www.sics.se