Abstract: A method for reducing vulnerability of a computer network to a detected virus threat includes receiving an identifier of a network device detected as a source of virus activity. The method also includes relating the identifier to a predetermined account of the detected device and then automatically disabling the device account. Accordingly, the detected device is isolated from the network to prevent infection of the network by the detected device.

Abstract: A method, apparatus, and program for monitoring an object of a system and validating the status of the object are provided. The invention can be implemented in numerous ways, including as a system (including a computer processing system), a method (including a computerized method), an apparatus, a computer readable medium, a computer program product, or a data structure tangibly fixed in a computer readable memory. Specifically, the invention provides methods and code devices for automated event processing to validate the status of an event of a monitored object in a network without manual operator intervention, including validation and remediation features based on event class.