Kai Schaetzl wrote:
Joe Flowers wrote on Mon, 11 Jul 2005 12:09:29 -0400:
That's bad, really bad
detection ...
No. It's good, really good detection.
You should improve that instead of trying to find a
barrier which gives you the best FP:FN ratio.
I'm not trying to find the best FP:FN ratio and I never said I was.
It may indeed give you the
best ratio with your bad setup
No. It's a good setup and I won't tell our users that they should stop
complimenting us on it's success because the results speak for
themselves and back up those compliments. And yes, it does work very
good in the short and long run - you are purely speculating that it is not.
BTW: what does "normalized" exactly mean in this context?
For lack of a better term in mind, I used "normalized". If the score of
a message is more than 30 points (or 25, I'm not going to waste time
looking back at the code) away from the nearest average, then I set the
score for the message back to 30 points away from the nearest average.
It's to help the difting averages from changes rapidly and abruptly. It
does not prevent them from drifting anywhere however.
It sounds like you have put in a lot of time to become an expert in the
traditional wisdom of SA and to tune it accordingly. And, I assume you
spend a lot of time keeping it tuned and dealing with SA upgrades. I'm
glad you have that time.... But, my situation is different and I agree
with some of the crtitics of SA - that it requires or almost requires an
expert to tune it properly and to keep it tuned properly - at least with
the traditional wisdom of how it "should" be set up. My goal is not to
become a SA expert, it would be nice if it happened along the way
somewhere down the road, but it is not a goal. Also, I have no plans of
hiring an SA expert unless it comes as a bonus along with the more
important things we are doing here. It will not be a deciding factor.
It's nice, but it is not primary.
And again, you are wrong. It is a very good setup (the proof is in the
pudding) and the only thing I see being changed in the future is an
upgrade to the latest version of SA.
Joe
