**Given...** The security administrator has prevention rules set up. **When...** Malicious traffic has been identified. **Then...** Block the malicious traffic.