Snort_AIPreproc/TODO

34 lines
889 B
Text

======================
AVERAGE/HIGH PRIORITY:
======================
- Save clusters and correlations to db
- Web interface
- Code profiling
- Comment all the code!!!
- Saving packet flows as .pcap
- Neural network for computing k
- Testing more scenarios, making more hyperalert models
=============
LOW PRIORITY:
=============
- Managing clusters for addresses, timestamps (and more?)
- Splitting the distinct subgraphs of the output graph
- libgc support
=====
DONE:
=====
+ PostgreSQL support
+ Regex comp cache
+ Managing hyperalert graph connection inside the alert structure itself
+ Keeping track of all the streams and alerts even after clustered
+ Dynamic cluster_min_size algorithm
+ Add alerts' history serialization to db.c as well
+ Bayesian learning among alerts in alert log
+ Split bayesian correlation out of correlation.c
+ Clustering alerts with time constraints