False Positive vs Fasle Negative

False Positive = The IDS identifies legitimate activity as something malicious.
How I see it = Your dog barks at you thinking you're a trespasser.

False Negative = The IDS identifies an attack as legitimate activity.
How I see it = Your dog smiles at the trespasser thinking it's you.

Find more posts tagged with

Comments

TechGuru80

Are you asking a question or making a statement?

Mdaud

Statement

si20

That's definitely correct, however I tend to strongly dislike comparisons like this. If it helps you remember: that's really good, and keep doing it! But I find that comparisons can really simplify and take the technicality out of things. I remember someone trying to teach TOR to me and a group and he was saying things like: "imagine an envelope. Now imagine I'm sealing the envelope". And by the end of his talk, everyone was dumbfounded and didn't understand TOR and was thinking TOR was as simple as sending a letter in the post - when really, TOR is an extremely complex process.