8. The system of claim 6 , further comprising a root translator, wherein the plurality of computer processors run on a plurality of servers, each computer processor residing on each server, one of the computer processors being dedicated to handling data from a network intrusion detection system (NIDS) and any messages from a firewall, other computer processors providing log analyzers for the other servers focusing on authorization logs and Web logs, and wherein results from the plurality of computer processors being fed into the root translator, whereby making the events in the root translator the events with the most information.
6. A system for correlating and managing distributed and heterogeneous events, comprising: a plurality of detectors monitoring and reporting on one or many system phenomena, and a plurality of computer processors aggregating events from the plurality of detectors, the plurality of computer processors converting events from the plurality of detectors into corresponding abstract symbols creating event words, preserving spatial boundaries of the events, merging the event words into a single merged event word, preserving temporal ordering among the events by using fixed time boundaries where all the events that occur within a time-boundary are considered to have happened simultaneously, identifying correlations among conglomerate events and matching patterns, and emitting matched conglomerate events dependent on the results of matching the patterns, wherein the merging the event words into a single merged event word comprises: concatenating all the event words from all the plurality of detectors at a single universal translator into the single merged event word; and wherein the preserving temporal ordering among the events comprises: defining a system time period, τ (tau), that determines a precision at which the events will be temporally distinguished; defining an abstract symbol, τ′ (tau prime), such that all the events that occur between two τ′ symbols have occurred within the same time period of τ length; and merging the event words first by time period, then by a detector ID to create the merged event word that preserves timing information out to the precision of the system time period, τ.