Detection of injected, dynamically generated, and obfuscated malicious code
Specification-based anomaly detection: a new approach for detecting network intrusions