1. A machine implemented method, comprising: monitoring for detecting a potential security breach, a first set of networked devices located on a transportation vehicle and a second set of user devices that are controlled by users of the transportation vehicle; detecting that a first parameter has reached a first threshold value indicating a suspicious behavior by a user device; obtaining at least a second parameter associated with the user device and the first parameter, based on detecting that the first parameter has reached the first threshold value; correlating the first parameter and the second parameter to declare a security related event when the second parameter has reached a second threshold value associated with the second parameter; and providing an alert for the security related event and a summary of security related events that have reached the first threshold value and the second threshold value; wherein an alert level for the security event varies based on a type of the security related event.