In the past, "it was about detection, and you had reaction technologies," said HP Network Security Architect Jim O'Shea. "Then we evolved to trying to detect things that were malicious with intent by using IDS. But that was a reactionary-type thing. It was a nice approach, but we were reacting: Something happened, you reacted. But if you knew it was bad, why did we let it in in the first place?"