PHY covert channels: can you see the idles?
Network Intrusion Detection: Evasion, Traffic Normalization, and End-to-End Protocol Semantics