The "Rate this file" functionality is very important in the Parser.
Actually, every hour, the GSI bot ranks every file according to a specific algorithm (that's why you often see at least 1 vote for a file).
You know that the parser detects Unknown and potentially infected files but, sometimes, it happens that those files are clean and can be trusted.
So, in order to reduce the "false positives", you have the possibility to rate a file from 1 to 10 (10 means "Trusted", 5 means "Be careful", 1 means "It's a dangerous file", ...).
How is this working?
To be detected as Unknown in the parser, a file must:
- be unknown in GSI's database
AND
- have "Current rate" <= 5
To be detected as Infected in the parser, a file must:
- be infected in GSI's database
AND
- have "Current rate" <= 7
So, this means that users have the possibility to add or remove a file of the unknown and infected tabs using the ranking functionality.
But, you must also know that all ranks don't have the same coefficient. It will depend on the level of the users.
There are 5 levels:
- Level 1: coef 1 (Members)
- Level 2: coef 2 (Kaspersky users, GSI Robot)
- Level 3: coef 3 (Supervisor users)
- Level 4: coef 4 (Admin users)
- Level 5: coef 5 (SuperAdmin users)
Sometimes it's better to understand with some examples :
Example 1:
- GSI robot ranks 10/10 (coef. 2) (Trusted)
- Member ranks 1/10 (coef. 1) (Untrusted)
=> Current rate is: ((10*2) + (1*1)) / 3 = 7
Example 2:
- GSI robot ranks 10/10 (coef. 2) (Trusted)
- Member 1 ranks 1/10 (coef. 1) (Untrusted)
- Member 2 ranks 5/10 (coef. 1) (Be carrefull)
- Admin user ranks 2/10 (coef. 4) (dangerous)
=> Current rate is: ((10*2) + (1*1) + (5*1) + (2*4)) / (2+1+1+4) = 4.25
Example 3:
- GSI robot ranks 7/10 (coef. 2) (Trusted)
- KL user ranks 2/10 (coef. 4) (Dangerous)
=> Current rate is: ((7*2) + (2*2)) / (2+2) = 4.5
If your rates are appropriate, we think it should be interesting to increase your coefficient. That’s why, in the future, the GSI robot will also search for adapted rates of files.
Note: on the other hand, it won’t be a problem to decrease the coefficient if your rates are often inappropriate.
I hope that know this functionality is clear enough.
In case, I made a simple video for this : http://gsi.kaspersky.fr/video/GSI_Rank.htm
