Which would be worse, false positive or False negative in case of detection ?

Sharad Jaiswal
Sharad Jaiswal

Posted On: Feb 22, 2018

 

False positive means a detection of a packet that actually isn't malicious. But false negative is something that passes from Firewall and becomes an incident. False positive can be rectified by changing rule-set and manual testing. But false negative could cause compromise of an entire system. Thus, false negative is far dangerous than false positive detection by a firewall or an anti-virus software.

    Related Questions

    Please Login or Register to leave a response.

    Related Questions

    Information Assurance Interview Questions

    How are information protection and assurance different ?

    Information assurance deals with protecting data and information system to keep the data reliable using non-repudiation techniques, backup and so on...

    Information Assurance Interview Questions

    What do you mean by CIA?

    CIA is a basic principle of information assurance where C means Confidentiality- keeping data secure, I means Integrity – Keeping data intact and A means availability- keeping data accessible when r..

    Information Assurance Interview Questions

    What do you mean by red team and blue team?

    Succinctly put, the red team is the offensive and blue team is a defensive one. Red team needs to succeed only once to be able to achieve its target whereas Blue team needs to stay alert all the time ..