Three Classes of Intruders

• Masquerader – unauthorized user who penetrates a system exploiting a legitimate user’s account (outside)

• Misfeasor - legitimate user who makes unauthorized accesses or misuses his privileges (inside)

• Clandestine user - seizes supervisory control to evade auditing and access controls or suppress audit collection (inside|outside)