Karl Heinz Reindl wrote:
involved into a discussion about this defintion I would like ask you does anyone know a binding definition?
thanks and
Basically a false positive is a bogus alert and a false
negative is an alert which should have been generated
but wasn't.

The ITsecurity.COM Dictionary of Information Security
(http://www.ITsecurity.com/dictionary/dictionary.htm):

[ http://www.itsecurity.com/dictionary/falsep.htm ]

False positive

A false positive is a term applied to a failure in an alerting system -
most commonly in an anti-virus product or intrusion detection system.

It occurs when a virus or intrusion condition is incorrectly reported;
that is, the alerting systems reports a virus or intrusion condition
that does not exist. Too many false positives can be very intrusive.

Compare with False negative.

 this entry last updated: Oct 14, 2002

� Copyright ITsecurity.com, 2002. All rights reserved. ]

[ http://www.itsecurity.com/dictionary/falsen.htm ]

False negative

A false negative is the term applied to a failure in an alerting system -
most commonly in an anti-virus product or intrusion detection system.

It occurs when a virus or intrusion condition exists, but is 'allowed'
(or ignored or missed) by the alerting system.

Compare with false positive.

 this entry last updated: Oct 14, 2002

� Copyright ITsecurity.com, 2002. All rights reserved. ]

- H. Morrow Long

_______________________________________________
ISSForum mailing list
[EMAIL PROTECTED]

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo

Reply via email to