[Oisf-users] URL reputation?
matt at somedamn.com
Wed Jan 30 15:25:18 UTC 2013
Has anyone discussed URL reputation as a feature? URL reputation is a
common offering for threat intelligence providers. For instance, Phish
Tank publishes an open source feed here:
http://www.phishtank.com/developer_info.php. I can pull that list and
turn it into 11k rules, but that doesn't seem optimal. For larger
feeds, it isn't possible at all. E.g. Symantec's Deep Sight feed has
over 150k URLs on it this morning. I tried turning that into a rule
set, but the box ran out of memory trying to load it.
More information about the Oisf-users