47. A non-transitory computer-readable medium having one or more instructions stored thereon for detecting threats on a network, wherein the one or more instructions, when executed by a processor, cause the processor to: capture target network traffic being transmitted between two or more hosts, wherein the target network traffic comprises a plurality of packets; assemble the plurality of packets into one or more messages; parse the assembled one or more messages to generate a semantic model of the target network traffic, wherein the semantic model comprises one or more representations of one or more operations or events represented by the one or more messages; generate one or more scores for the one or more operations or events using a plurality of scoring algorithms; and identify one or more potentially threatening ones of the one or more operations or events based on the one or more scores.
47. A non-transitory computer-readable medium having one or more instructions stored thereon for detecting threats on a network, wherein the one or more instructions, when executed by a processor, cause the processor to: capture target network traffic being transmitted between two or more hosts, wherein the target network traffic comprises a plurality of packets; assemble the plurality of packets into one or more messages; parse the assembled one or more messages to generate a semantic model of the target network traffic, wherein the semantic model comprises one or more representations of one or more operations or events represented by the one or more messages; generate one or more scores for the one or more operations or events using a plurality of scoring algorithms; and identify one or more potentially threatening ones of the one or more operations or events based on the one or more scores. 69. The non-transitory computer-readable medium of claim 47 , wherein the one or more instructions, when executed by the processor, further cause the processor to prevent one or more identified potentially threatening operations from being performed on a database that is accessible to one of the two or more hosts.