[gnso-ff-pdp-may08] Re: Mannheim score concerns (minority view)

["George Kirikos" <fastflux@xxxxxxxx>]

Hi again,

On Wed, Sep 17, 2008 at 12:23 PM, George Kirikos wrote:
> In particular, just as malevolent virus authors ("the bad guys") today
> purchase anti-virus software to pre-test their creations against the
> signatures provided by anti-virus vendors, malevolent agents using
> fast flux techniques can certainly test their networks to see whether
> their score is at an "acceptable" level. In other words, they'll
> adapt. Thus, the formula begins to lose its power to discriminate

I just wanted to add that the notions of adaptation over time and
pre-testing aren't confined just to anti-virus systems, but also in
the email spam and web-spam worlds, to give further examples. Email
providers and search engines are constantly tweaking their
algorithms/formulas as spammers adapt to existing ones. A static
formula is likely doomed to failure.

Sincerely,

George Kirikos
www.LEAP.com