1. A computer network device, comprising: an intrusion prevention rule set comprising a plurality of rules, each of the plurality of rules associated with two or more rule classification parameters; an intrusion prevention module operable to use two or more of the classification parameters associated with the plurality of intrusion protection rules to selectively apply the rules to provide network intrusion protection of network traffic.