Comments on: Ryan Barnett – ModSecurity Web Security Metrics http://spiresecurity.com/?p=165 Risk and Cybersecurity Analysis Wed, 21 Aug 2013 23:28:51 +0000 hourly 1 http://wordpress.org/?v=3.5.1 By: Pete http://spiresecurity.com/?p=165&cpage=1#comment-220 Pete Mon, 02 Jun 2008 12:07:46 +0000 http://spiresecurity.com/blog/?p=165#comment-220 @Vicente -

I agree that you may never count all of them, but I also think you can get most of them through those alternate means. That’s why we have multiple layers of defense. Your best effort is all you can do.

Pete

]]> By: Vicente Aceituno http://spiresecurity.com/?p=165&cpage=1#comment-219 Vicente Aceituno Mon, 02 Jun 2008 05:05:13 +0000 http://spiresecurity.com/blog/?p=165#comment-219 You can’t count false negatives. You might count false negatives that you can detect through alternative means; but the total “false negatives” is unknown. That is why they are called false negatives; because you don’t detect them.

]]>