False Positive/False negative confusion!!

ausman79

Okay..so i have my exam scheduled for tomorrow and i still can't get this straight!
Does False positive/false negative work differently when relating them to IDS vs Biometrics?

Here's what I understand:
IDS- false negative is malicious activity ignored; false positive is normal activity considered malicious

biometric scan- false negative is authorized person denied; false positive is intruder given access

They seem to work opposite depending on IDS or Biometric scan.

Can someone please explain? THANKS IN ADVANCE!!!

Daniel333

I just mentally replace the word "false" with "incorrect"

Norton gave a false positive and deleted ntldr.
In this case I translate it to "Norton gave a incorrect positive and deleted ntldr"

again,
"Symantec gave a false negative and permitted russianbrides.exe to execute"
Translated "Symantec gave a incorrect negative and permitted russianbrides.exe to execute"

I would recommend just writing it out on your scratch paper on the exam. Hope that helps. Best of luck!

ausman79

Thanks Daniel...
I was just taking a practice exam and it gave both false positive and false acceptance as options. I thought they both were the same?

In this case, false acceptance was the right answer in regards to a biometric scan.