29. The system of claim 24 , wherein the one or more executable modules further: receive one or more representations of acceptable network traffic; and train each of one or more of the plurality of scoring algorithms to score target operations or events using the one or more representations of acceptable network traffic.
24. A system for detecting threats on a network, the system comprising: at least one hardware processor; and one or more executable modules that, when executed by the at least one hardware processor, capture target network traffic being transmitted between two or more hosts, wherein the target network traffic comprises a plurality of packets, assemble the plurality of packets into one or more messages, parse the assembled one or more messages to generate a semantic model of the target network traffic, wherein the semantic model comprises one or more representations of one or more operations or events represented by the one or more messages, generate one or more scores for the one or more operations or events using a plurality of scoring algorithms, and identify one or more potentially threatening ones of the one or more operations or events based on the one or more scores.