From: karr@niss.org Sent: Tuesday, March 28, 2006 8:15 AM To: ndhs-dc@samsi.info Subject: Questions du Jour 1. What is a legitimate user? 2. What is an intruder? 3. Is there a conceptual difference? 4. Is there an operational difference? 5. Are these questions different for data releases than for servers? 6. Can, and if so how, we characterize the state of knowledge of an intruder? Alan F. Karr, Director National Institute of Statistical Sciences (NISS) 19 T W Alexander Drive PO Box 14006 Research Triangle Park, NC 27709-4006 Tel: 919-685-9300 FAX: 919-685-9310 karr@niss.org