Furthermore, there is a need for an active security system that will take measured action against perceived security threats even in the absence of a human network manager. [0012] Further, with the ability of a single IDS sensor to create hundreds of thousands of events, many companies find it impossible to effectively monitor and prioritize the constant stream of alerts.