performed using manipulations of resources or behaviors that violate expected properties. An
attack might require bypassing a protection mechanism. For example, a guest visitor to a web
site might attempt to access administrative scripts by requesting them directly.
ATTACKER: an actor who attempts to violate intended security policy, i.e., who attempts to