An alert or alarm that occurs in the absence of an actual attack; can sometimes be produced when an IDPS mistakes normal system activity for an attack.