Question: Think about a system that generates ten million audit records every day. Also suppose that there are on average 10 attacks per day on this system and that each such attack is reflected in twenty records. If the intrusion-detection system has a true-alarm rate of 0.6 and a false alarm rate of 0.0005, what percentage of alarms generated by the system correspond to real intrusions?