T Pietraszek, A Tanner - Information security technical report, 2005 - Elsevier
… be false positive, ie, will not be related to intrusive activities. With the same false alarm rate
and a more realistic detection rate of 0.7, we obtain that 42% of alerts will be false positives. …