Help - Search - Members
Full Version: File's rank in GSI report
Kaspersky Lab Forum > English User Forum > GetSystemInfo
Kamille
Hello,


The "Rate this file" functionality is very important in the Parser.

Actually, every hour, the GSI bot ranks every file according to a specific algorithm (that's why you often see at least 1 vote for a file).
You know that the parser detects Unknown and potentially infected files but, sometimes, it happens that those files are clean and can be trusted.

So, in order to reduce the "false positives", you have the possibility to rate a file from 1 to 10 (10 means "Trusted", 5 means "Be careful", 1 means "It's a dangerous file", ...).

How is this working?
To be detected as Unknown in the parser, a file must:
- be unknown in GSI's database
AND
- have "Current rate" <= 5

To be detected as Infected in the parser, a file must:
- be infected in GSI's database
AND
- have "Current rate" <= 7


So, this means that users have the possibility to add or remove a file of the unknown and infected tabs using the ranking functionality.

But, you must also know that all ranks don't have the same coefficient. It will depend on the level of the users.
There are 5 levels:
  • Level 1: coef 1 (Members)
  • Level 2: coef 2 (Kaspersky users, GSI Robot)
  • Level 3: coef 3 (Supervisor users)
  • Level 4: coef 4 (Admin users)
  • Level 5: coef 5 (SuperAdmin users)

Sometimes it's better to understand with some examples :

Example 1:
- GSI robot ranks 10/10 (coef. 2) (Trusted)
- Member ranks 1/10 (coef. 1) (Untrusted)
=> Current rate is: ((10*2) + (1*1)) / 3 = 7


Example 2:
- GSI robot ranks 10/10 (coef. 2) (Trusted)
- Member 1 ranks 1/10 (coef. 1) (Untrusted)
- Member 2 ranks 5/10 (coef. 1) (Be carrefull)
- Admin user ranks 2/10 (coef. 4) (dangerous)
=> Current rate is: ((10*2) + (1*1) + (5*1) + (2*4)) / (2+1+1+4) = 4.25


Example 3:
- GSI robot ranks 7/10 (coef. 2) (Trusted)
- KL user ranks 2/10 (coef. 4) (Dangerous)
=> Current rate is: ((7*2) + (2*2)) / (2+2) = 4.5



If your rates are appropriate, we think it should be interesting to increase your coefficient. That’s why, in the future, the GSI robot will also search for adapted rates of files.
Note: on the other hand, it won’t be a problem to decrease the coefficient if your rates are often inappropriate.



I hope that know this functionality is clear enough.
In case, I made a simple video for this : http://gsi.kaspersky.fr/video/GSI_Rank.htm
Jowi
Hi Kamille,

great work and good explained. Can you pinned it to the important news?
norwegian

Sounds interesting. So you have a calculator for the rating scale.
How does the rating for the user come about?
From judgment of posting topics, or as a member of the GSI parser. Reason being, I've need signed into the site, just used the
anon user/upload file/other options. Would having a membership of the GSI parser valuate at all?

Hope you understand
Kamille
Citation (norwegian @ 28.03.2009 07:03) *
Sounds interesting. So you have a calculator for the rating scale.
How does the rating for the user come about?
From judgment of posting topics, or as a member of the GSI parser. Reason being, I've need signed into the site, just used the
anon user/upload file/other options. Would having a membership of the GSI parser valuate at all?

Hope you understand

Hi norwegian,

I'm not sure to fully understand but you'll have to be logged in in order to access this functionality if it's what you asked.

Of course, some rules will apply in order to "control" those ranks. I'm currently working on this so it's to soon to explain you exactly but here are the headlines :
- to be applicable, a rank on a file must have been made also by 2 users (including GSI bot) but this can change...
- to be applicable, the files must not have already an average rank of 10/10.
- good ranks will give you experience and XP will help you to reach next level.
- bad ranks will remove you a lot of XP ... but you'll have the possibility to fix your "bad" rates or to report this as a bug if you're sure about your rates.
- in the homepage, users will have the possibility to rank files from ranks made by other users.
- etc ...
neomage
This is good system but don't you introduce bias (statistically speaking) when a user rates a file based on other users ratings. It will take few people to rate bad file good and good file bad then other people might just follow their ratings. I hope bit9 ratings (from my earlier post) should be included in GSI bot (a dream come true).
Kamille
Citation (neomage @ 5.05.2009 20:25) *
This is good system but don't you introduce bias (statistically speaking) when a user rates a file based on other users ratings. It will take few people to rate bad file good and good file bad then other people might just follow their ratings. I hope bit9 ratings (from my earlier post) should be included in GSI bot (a dream come true).

Please, stop reading my mind !!!!!
smile.gif
adi_bun
Hello Kamille !

I`ve got one bad rate . It`s your " bug " ( Scott , Kamille , romain ) , mine , or a GSI Bot bug ? b_lol1.gif
Kamille
Citation (adi_bun @ 7.05.2009 09:07) *
Hello Kamille !

I`ve got one bad rate . It`s your " bug " ( Scott , Kamille , romain ) , mine , or a GSI Bot bug ? b_lol1.gif

GSI's bot smile.gif

Actually you can see more information on the comments for this file.
It's not dangerous but not trusted wink.gif

Let's say that this file is an exception wink.gif
Kamille
Update regarding rates :

http://forum.kaspersky.com/index.php?showtopic=117785
neomage
QUOTE(Kamille @ 25.05.2009 05:51) *


Difference between level 6 and 5 is that of earth and sky. Would be it be possible to search via name or md5 all the files you rated incase you want to change rating of a file later on.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.