Incorporation of application layer protocol syntax into anomaly detection
binpac: a yacc for writing application protocol parsers