1. A system for securing a device comprising: a. a behavior module for authorizing events, updating rule data, and securing the device; and b. an authentication module responsive to a first event being a secure event, for determining if the first event is authenticated; c. responsive to the first event being authenticated, for directing the behavior module to authorize the first event and to update the rule data; d. responsive to the first event not being authenticated, for determining if an authentication is valid; e. responsive to the authentication being valid, for directing the behavior module to authorize the first event and update the rule data; f. responsive to the authentication not being valid, for directing the behavior module to secure the device; g. a processor; h. a memory storing the behavior module and the authentication module for execution by the processor; i. wherein the authentication module is responsive to the first event not being a secure event, for directing the behavior module to authorize the first event and update the rule data, wherein secure events require authentication and non-secure events do not require authentication, and j. wherein the authentication module is responsive to the first event authentication being valid, for directing the behavior module to determine if the first event is a static event, and wherein the behavior module is responsive to the first event not being a static event, for authorizing the first event and updating the rule data, the rule data comprising at least one item from the group of: which events have been authenticated, a number of times an event occurred, if a user is connected to a docking station, and timer information.