Pick a detector, run it over some benign traffic, and choose a threshold. Usually the threshold is an order statistic of the benign scores — the k-th largest, or a quantile — and you report something like false-positive rate ≤ 2% at 95% confidence. Two questions tend to get skipped in that sentence: how many benign samples does the promise... Weiterlesen: How many samples does a false-positive budget need?
Intelligence View
⚡ tsecurity.de Intelligence
How many samples does a false-positive budget need?
Pick a detector, run it over some benign traffic, and choose a threshold. Usually the threshold is an order statistic of the benign scores — the k-th largest, o…