Intruder detection

For network protection devices or software, see Intrusion detection system. For physical systems designed to detect intrusions, see Security alarm.

In information security, intruder detection is the process of detecting intruders behind attacks as unique persons, rather than just detecting that an attack has occurred. This technique tries to identify the person behind an attack by analyzing their computational behaviour. It is similar to masquerade detection, the process of recognising an illegitimate user who is attempting to impersonate a legitimate one.