Table 10 Predicted signature ranking for four popular SNORT rulesets
From: A quality metric for IDS signatures: in the wild the size matters
| Â | Percentile level and in parenthesis absolute number of signatures | ||
|---|---|---|---|
Top N% (total number of signatures) | N = 5% (988) | N = 10% (1,976) | N = 50% (9,881) |
Ruleset (number of signatures)a | Â | Â | Â |
Vulnerability Research Team (5,559) | 4.4% (246) | 5.2% (290) | 47.6% (2,646) |
Emerging Threats (11,344) | 6.2% (703) | 13.0% (1,484) | 51.1% (5,797) |
Bleeding Edge Team (1,254) | 1.0% (13) | 7.8% (98) | 44.1% (554) |
SRI Bothunter (1,606) | 1.6% (26) | 6.5% (104) | 55.0% (884) |