New market segment of security software, called Host Intrusion Prevention (HIP), has risen to protect network assets against damage from unknown attacks. HIP software works with the operating system kernel to block abnormal application behavior in the expectation that the abnormal behavior represents an unknown attack. The introduction of intrusion prevention shifts enterprise security architectures over the next 3 to 5 years. The gorilla security vendors will follow NetScreen’s lead in acquiring intrusion prevention vendors in 2003. The Yankee Group expects Crossbeam, ForeScout, and Teros to be innovators in this trend.”]