5. The method of claim 1 , where, generating the first fraud alarm includes: comparing at least a portion of the first event record to a profile detection rule, and generating the first fraud alarm when the first event record violates the profile detection rule.
5. The method of claim 1 , where, generating the first fraud alarm includes: comparing at least a portion of the first event record to a profile detection rule, and generating the first fraud alarm when the first event record violates the profile detection rule. 7. The method of claim 5 , where the profile detection rule is based on historical network event records.