You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@metron.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2018/01/08 22:08:00 UTC

[jira] [Commented] (METRON-1366) Add an entropy stellar function

    [ https://issues.apache.org/jira/browse/METRON-1366?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16317184#comment-16317184 ] 

ASF GitHub Bot commented on METRON-1366:
----------------------------------------

Github user justinleet commented on the issue:

    https://github.com/apache/metron/pull/872
  
    @cestella Any response to the comment by @ottobackwards ?  I glanced over it, and I like it and think it's valuable, but he's hitting at the core impl, so I don't want to +1 anything.


> Add an entropy stellar function
> -------------------------------
>
>                 Key: METRON-1366
>                 URL: https://issues.apache.org/jira/browse/METRON-1366
>             Project: Metron
>          Issue Type: Improvement
>            Reporter: Casey Stella
>
> Trending entropy for various volumetric statistics (e.g. netflow data) has been a useful metric for intrusion detection (see http://www.cs.bu.edu/techreports/pdf/2005-002-anomaly-mining.pdf).  To wit, it makes some sense to add an entropy calculation for Stellar.  Used in conjunction with the profiler and an outlier detector, we can recreate the work of Lakhina referenced above.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)