1. A system for securing a device comprising: a. a behavior module for authorizing events, updating rule data, and securing the device; and b. an authentication module responsive to a first event being a secure event, for determining if the first event is authenticated; c. responsive to the first event being authenticated, for directing the behavior module to authorize the first event and to update the rule data; d. responsive to the first event not being authenticated, for determining if an authentication is valid; e. responsive to the authentication being valid, for directing the behavior module to authorize the first event and update the rule data; and f. responsive to the authentication not being valid, for directing the behavior module to secure the device.