Severity level calculation of attacks

Trellix IPS assigns a default severity (high, medium, or low) to every attack in its attack database. Severity is based on the immediate effect, or impact, on the target system.

Severity numbering scheme

Trellix IPS uses a numeric mapping scheme to indicate Informational, Low, Medium, and High severity for a more intuitive display. The numbering scheme is as follows:

The guidelines in assigning severity levels are very similar to those used in many open security forums. You can customize these severity levels to meet the needs of your system based on the worth of your protected assets—an attack whose severity might be considered Low to one company might be High to another.