Security advances push intrusion detection deeper into the network, relegating its role to forensics investigation and internal monitoring. Drowning in signature libraries and reactive event ...