Welcome, Guest!!
follow us on... rss

Author Topic: Scoring methods what are the best practices.  (Read 5720 times)

Mur

  • Newbie
  • *
  • Posts: 23
    • View Profile
Scoring methods what are the best practices.
« on: August 11, 2009, 04:36:01 PM »
I have a question about scoring.

I first used the example code and found the (code snip)>=3 isn't a good method.

The Returned information Y|MULTI|IP|22|EMAIL|12|NAME|4 can't just be added to give you a flagging number.
I've noticed numbers as high as 260.

So I started setting up an (If From to range) process.
But that really didn't work well due to what seems to be an unlimited return number for any given field. 

Testing different setups is giving me more ideas but I think it has to be a simple "Weight Added to Field" that will work in the end.
Right now I use:
If IP = 0 and Email = 0 Exit function

If IP = 1 and Email = 1 and Name = 0 Score 10 (blocks)
If IP = 0 and Email = 1 and Name = 0 Score 10 (blocks)
If IP = 1 and Email = 0 and Name = 1 Score  5 (flags but allows)
If IP = 0 and Email = 0 and Name = 1 Score 0 (Allows)
If IP = 1 and Email = 0 and Name = 0 Score 5 (flags but allows)

That's not the actual code and the numbers can be greater than one.
I just wanted to put a starting point here and to get your feedback and experience while scoring. 
I'm looking to limit the score card to a max score of 10 before it blocks the user.

I'm thinking we have to assign weight to each field.
But I'm not sure how much at this point because I don't have statistics on Name IP and Email hits.

Any suggestions or ideas about what percentage of weight to assign to each field?

MysteryFCM

  • Moderator
  • Full Member
  • *****
  • Posts: 200
    • View Profile
    • I.T. Mate
Re: Scoring methods what are the best practices.
« Reply #1 on: August 11, 2009, 04:47:58 PM »
In order;

IP = 60% (block)
E-mail = 30% (block or flag)
Username = 10% (allow unless one of the above is a match)

Given how simple it is for spammers to create for example, Gmail (cheers for making it super simple for them Google!), the IP MUST be given the most weight, with e-mail second most, and username the least.
Regards
Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

Mur

  • Newbie
  • *
  • Posts: 23
    • View Profile
Re: Scoring methods what are the best practices.
« Reply #2 on: August 11, 2009, 05:12:57 PM »
In order;

IP = 60% (block)
E-mail = 30% (block or flag)
Username = 10% (allow unless one of the above is a match)


Thanks, I'll work with your suggestion and setup a test for the week.

MysteryFCM

  • Moderator
  • Full Member
  • *****
  • Posts: 200
    • View Profile
    • I.T. Mate
Re: Scoring methods what are the best practices.
« Reply #3 on: August 11, 2009, 05:15:15 PM »
No problem :)
Regards
Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net