1. A method of improving intrusion detection in a computing network, comprising steps of: providing intrusion detection processing in an operating system kernel; providing an application program which makes use of the operating system kernel during execution; executing the application program; and selectively evaluating at least one incoming communication of the executing application program for an intrusion using the provided intrusion detection processing in the operating system kernel.