Re: False positive, false intrusion, false alarm

On Wed, 26 Apr 2006, in the Usenet newsgroup alt.computer.security, in article
<kvA3g.72738$P01.26325@pd7tw3no>, new guy wrote:

Thanks for your explaination. Examples always help :)

The problem is that this is a live language situation. The definitions are
not cast in stone and fully agreed upon.

I used to think that a false positive is when authorized users are not
accepted :(

Depends where you are looking at the situation. The authentication
mechanism did not authorize the person who should be - that's a 'false
negative'. The authentication mechanism did determine that the person
is a bad guy - that's a 'false positive'. See me pulling my hair?

Old guy
.

Loading