Abstract: Communications can be proactively monitored using a system that is rules-based instead of anomaly-based or signature-based. Large quantities of information can be processed to deliver actionable information in a timely and prioritized fashion. The system can include a graphical dashboard interface to facilitate the management of a network or a network of overlapping networks. The system can be used to monitor, validate, and tune all or substantially all security controls within the secured area that include all of the networks for a particular enterprise. Unique address identification heuristics and source address identification heuristics can be incorporated into the system.