beenull/crowdsec
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

make Update public to allow training to use it

Browse source
This commit is contained in:
Emanuel Seemann 2023-09-11 17:06:50 +02:00
parent aca22ed733
commit 20d81d3eed
No known key found for this signature in database
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
pkg/leakybucket/bayesian.go
View file

@ -30,7 +30,7 @@ type BayesianBucket struct {
DumbProcessor
}
func updateProbability(prior, probGivenEvil, ProbGivenBenign float32) float32 {
func UpdateBayesianProbability(prior, probGivenEvil, ProbGivenBenign float32) float32 {
numerator := probGivenEvil * prior
denominator := numerator + ProbGivenBenign*(1-prior)
@ -101,7 +101,7 @@ func (b *BayesianEvent) bayesianUpdate(c *BayesianBucket, msg types.Event, l *Le
if b.getGuillotineState() {
l.logger.Tracef("guillotine already triggered for %s", b.rawCondition.ConditionalFilterName)
l.logger.Tracef("condition true updating prior for: %s", b.rawCondition.ConditionalFilterName)
c.posterior = updateProbability(c.posterior, b.rawCondition.ProbGivenEvil, b.rawCondition.ProbGivenBenign)
c.posterior = UpdateBayesianProbability(c.posterior, b.rawCondition.ProbGivenEvil, b.rawCondition.ProbGivenBenign)
l.logger.Tracef("new value of posterior : %v", c.posterior)
return nil
}
@ -119,10 +119,10 @@ func (b *BayesianEvent) bayesianUpdate(c *BayesianBucket, msg types.Event, l *Le
l.logger.Tracef("condition %T updating prior for: %s", condition, b.rawCondition.ConditionalFilterName)
if condition {
c.posterior = updateProbability(c.posterior, b.rawCondition.ProbGivenEvil, b.rawCondition.ProbGivenBenign)
c.posterior = UpdateBayesianProbability(c.posterior, b.rawCondition.ProbGivenEvil, b.rawCondition.ProbGivenBenign)
b.triggerGuillotine()
} else {
c.posterior = updateProbability(c.posterior, 1-b.rawCondition.ProbGivenEvil, 1-b.rawCondition.ProbGivenBenign)
c.posterior = UpdateBayesianProbability(c.posterior, 1-b.rawCondition.ProbGivenEvil, 1-b.rawCondition.ProbGivenBenign)
}
l.logger.Tracef("new value of posterior: %v", c.posterior)