Home > Cybersecurity glossary > False positive

False positive

In cybersecurity, a false positive (or false alarm) occurs when a IT security system (such as an antivirus, an intrusion detection system - IDSa firewall applicative - WAFa tool SIEMetc.) incorrectly signals a threat, attack or malicious activity that does not actually exist.

Towards the ORSYS Cyber Academy: a free space dedicated to cybersecurity