1. A method of intrusion detection system virtualization, comprising: receiving a stream of packets; fingerprinting each packet in a said stream to identify at least one target operating system (OS) type; directing each said packet to a virtual IDS process corresponding to each said identified target OS type; comparing each said packet to a threat signature set corresponding to each said identified target OS type in said virtual IDS process; and accepting each said packet based on said comparing.