Router Naming Convention for cnc.net, 201104

Regular Expressions:

1. ^w\d+\.z\d+\.[a-z]+-fl\.dsl\.cnc\.net$
2. ^w\d+\.z\d+\.bos-ma\.dsl\.cnc\.net$
3. ^w\d+\.z\d+\.chi-il\.dsl\.cnc\.net$
4. ^w\d+\.z\d+\.sjc-ca\.dsl\.cnc\.net$
5. ^w\d+\.z\d+\.was-dc\.dsl\.cnc\.net$
6. ^w018\.z\d+\.[a-z]+-[a-z]+\.dsl\.cnc\.net$
7. ^w\d+\.z064003218\.dfw-tx\.dsl\.cnc\.net$
8. ^[a-z]+\d+\.(z\d+\.[a-z]+-[a-z]+\.dsl)\.cnc\.net$

Statistics:

• Training routers with at least two clustered interfaces: 5
• Positive Predictive Value: 0.667
• True Positives (green): 10
• False Positives (red): 5
• IP literals extracted (red): 0
• False Negatives, identifier extracted (orange): 2
• False Negatives, not matched: 0
• Training routers with a single interface in suffix: 13

Legend:

Evaluation against training data: