1. A method for classifying intrusion alerts in a computer network, comprising a) monitoring traffic data in a computer network; b) detecting an occurrence of an intrusion from the monitored traffic data c) providing an intrusion alert and data in relation to the intrusion alert in response to the detection of the occurrence of the intrusion; d) generating a statistical analysis of the data in relation to the intrusion alert; and e) classifying the intrusion alert based on said statistical analysis.