On Mon, 19 Sep 2016 07:46:11 +0200
Marcus Schopen <li...@localguru.de> wrote:

> my be a little bit off topic, but are there any experience with the
> efficiency of pyzor and clamav-unofficial-sigs [1].

No comment on pyzor because I don't use it, but some of the
clamav-unofficial-sigs are useful.  We use the following data sets:

   phish.ndb
   rogue.hdb
   sanesecurity.ftm
   winnow_malware.hdb
   winnow_malware_links.ndb

We find the others have unacceptably-high false-positive rates, and
even the ones above occasionally get a bad signature that produces annoying
false-positives.

Regards,

Dianne.
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to