From 0bf4d8bafc71f44cd65c7ad291bc0b4270dcecb8 Mon Sep 17 00:00:00 2001 From: Sami Mokaddem Date: Fri, 13 Sep 2019 09:30:58 +0200 Subject: [PATCH] Updated `base_score_config` to support `namespace:predicate` format --- models/nids-simple-model.json | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/models/nids-simple-model.json b/models/nids-simple-model.json index fde595a..ef041dd 100644 --- a/models/nids-simple-model.json +++ b/models/nids-simple-model.json @@ -15,11 +15,13 @@ "threshold": 30, "default_base_score": 80, "base_score_config": { - "estimative-language": 0.25, - "priority-level": 0.25, - "retention": 0.25, - "targeted-threat-index": 0.125, - "false-positive": 0.125 + "estimative-language:confidence-in-analytic-judgment": 0.1667, + "estimative-language:likelihood-probability": 0.1667, + "false-positive:risk": 0.1667, + "priority-level": 0.1667, + "retention": 0.1667, + "targeted-threat-index:targeting-sophistication-base-value": 0.0833, + "targeted-threat-index:technical-sophistication-multiplier": 0.0833 } }, "description": "Simple decaying model for Network Intrusion Detection System (NIDS). ", @@ -38,5 +40,5 @@ "zeek", "bro" ], - "version": 1 + "version": 2 }