When building a security policy (and implementing it) you must know who you are defending against. I would like to use proper terms, if they're already defined. I'm imagining a list such as:
- Passive attackers - Those who aren't interested in you specifically but might intercept your data (like the NSA if it doesn't have an interest in you)
- Uninterested attackers - Those that aren't interested in you in particular, but are actively testing your defenses. I would classify automated SSH attacks and port scans in this category (looking for easy targets, etc).
- Active, interested attackers - People actively trying to break your security to get inside the network. Pentesters or someone you pissed off in IRC.
That's all I have. Is it enough, or is there a level of finnese I've missed? Is there any group of attackers I've completely forgot about?