1. A method for detecting network attacks, comprising: (a) receiving a plurality of attack indications based on data transmitted on the network; (b) applying rules to the plurality of attack indications; and (c) generating an alert if an application of at least a subset of the rules on the plurality of attack indications indicates a potential attack.