1. A system for detecting intrusion and misuse of a computer in a computer network, comprising: an agent manager that directs actions of software agents to collect computer performance parameters from the computer; a data analyzer that summarizes the collected computer performance parameters and generates a user profile; and a comparator that compares the summarized computer performance data and the user profile and generates a prompt based on a set of criteria related to the computer performance data and the user profile.