home/glossary/False Positive

False Positive

nounid 2558·updated Aug 28, 2026
verified

An alert that incorrectly indicates that malicious activity is occurring.

MWE

Attested in

No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.

Classifications

Entity Type

Event85%llm-generatedllm:claude-haiku-4-5

Sensitivity

95%llm-generatedllm:claude-haiku-4-5

Information Class

95%llm-generatedllm:claude-haiku-4-5

Variants

synonym
Type I error (in statistics)
plural
False Positives
possessive
False Positive's
pluralpossessive
False Positives'

Framework definitions

NISTIR 7298: Glossary of Key Information Security Terms, Revision 21 senseview framework →
§1
An alert that incorrectly indicates that malicious activity is occurring.
NIST SP 800-611 senseview framework →
§1
An alert that incorrectly indicates that malicious activity is occurring.
False Positive1 senseview framework →
§1
1. An alert that incorrectly indicates that a vulnerability is present. 2. An alert that incorrectly indicates that malicious activity is occurring. 3. An instance in which a security tool incorrectly classifies benign content as malicious. 4. Incorrectly classifying benign activity as malicious. 5. An erroneous acceptance of the hypothesis that a statistically significant event has been observed. This is also referred to as a type 1 error. This is also referred to as a type 1 error. When “health-testing” the components of a device, it often refers to a declaration that a component has malfunctioned – based on some statistical test(s) – despite the fact that the component was actually working correctly.
Classification: True vs. False and Positive vs. Negative1 senseview framework →
§1
an outcome where the model incorrectly predicts the positive class.
National Security Commission on Artificial Intelligence: The Final Report1 senseview framework →
§1
An example in which the model mistakenly classifies an item as in the positive class
Trustworthy Machine Learning1 senseview framework →
§1
A false positive is approving an applicant who should be denied
Legacy lexicon import1 senseview framework →
§1 · legacy_primary
An alert that incorrectly indicates that malicious activity is occurring.
DR-088 backfill from the noun definition column

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.