Question:
Application of Law of Total Probability
Consider a system that generates 10 million audit records per day. Also assume that there are on average 10 attacks per day on this system and that each such attack is reflected in 20 records. If the intrusion-detection system has a true-alarm rate of 0.6 and a false alarm rate of 0.0005, what percentage of alarms generated by the system correspond to real intrusions?