What is True/False Positives & Negatives?
Terms used to describe whether an alert correctly identified a threat (True Positive) or mistakenly flagged normal behavior (False Positive), or missed a threat (False Negative).
Why it matters
Understanding this concept helps in grasping how modern networks and security systems operate, providing a foundation for more advanced topics.
Real-world Analogy
A false positive is a fire alarm going off when someone burns toast. A false negative is the alarm staying silent when the house is actually on fire.
Other Dictionary Terms
Access Control List (ACL)
A list of rules that specifies which users or systems are granted or denied access to a particular object or system resource.
Dictionary TermAdvanced Persistent Threat (APT)
A stealthy threat actor, typically a nation state or state-sponsored group, which gains unauthorized access to a computer network and remains undetected for an extended period.
Dictionary TermARP Spoofing
A type of attack in which a malicious actor sends falsified ARP (Address Resolution Protocol) messages over a local area network.