Score generated by the Aurora Engine
Suggested implementation
The score represents the confidence the Aurora Engine has that a file is good or bad. Scores returned by the Aurora Engine are decimal numbers ranging from -1.0 to +1.0. A negative value indicates that the file has been classified as a potentially bad file and a positive value indicates that the file has been classified as a potentially good file. The numerical value indicates the confidence in this file being identified as a risk or not.
For example:
|
Score |
Meaning |
|---|---|
|
-0.6 |
There is a 60% confidence level that the file is bad. |
|
+0.6 |
There is a 60% confidence level that the file is good. |
If an error occurs during the processing of the file, the score may be NaN (not a number) to indicate that a score was not generated. In this case, the result should contain more information on the error.
As a guideline, the following conventions serve to classify the files.
|
Score |
Meaning |
|---|---|
|
Less than -0.6 |
Malware |
|
-0.6 to 0 |
Suspicious |
|
Greater than 0 |
Safe |
Scoring considers not only the threat indicators, but also the relationships between these and many other characteristics of the file. Because the scoring uses complex mathematical models that operate directly on the features of the file, it is not possible to determine the score only from the threat indicators.