OKENA StormWatch defends against the proliferation of attacks across networks by deploying intelligent agents across desktops and servers to ensure their integrity. StormWatch agents intercept an application's resource requests to the operating system to make a real-time allow/deny decision according to the customer's application security policy. One of the values and competitive advantages of StormWatch is the ability to correlate actions. This applies at the agent level where events from the four different interceptors are correlated as well as the network-wide level where events from multiple agents are also correlated. This interrelationship of events, and the resulting pro-active actions taken by StormWatch, is crucial when preventing against new and unknown attacks.