. "Once the damage is done, the historical reconstruction often generates a reaction of ???if we only had seen this coming.??? The reason attacks presently go undetected by conventional systems or human analysts is that typically there is no way to examine and analyze the hundreds or thousands of alarms and alerts that firewalls, intrusion detection systems, and other devices or applications generate" . . . . . .