Security must consider external environment of the system, and protect the system resources////
Intruders (crackers) attempt to breach security///
Threat is potential security violation///
Attack is attempt to breach security///
Attack can be accidental or malicious///
Easier to protect against accidental than malicious misuse