Automatic generation of buffer overflow attack signatures: an approach based on program behavior models
Polygraph: automatically generating signatures for polymorphic worms