1. An apparatus for security management in a data, voice, or video network comprising, in combination: at least one vicarious device capable of automatically simulating at least one corresponding real device or transmission medium in said network, wherein said at least one vicarious device is derived from a device dataset containing one or more variables having one or more instance values describing the behavior of said corresponding real device or transmission medium over time, wherein said device dataset contains only those variables and instance values actually used when said corresponding real device or transmission medium is under attack; at least one monitor for detecting when said network may be being attacked; and at least one trigger for substituting at least one of said vicarious devices for said corresponding real device or transmission medium.