It is an object of the present invention to provide a device for generating analysis object data that allows the simple setting of an intrusion detection policy, and more specifically, to allow policy setting that performs pattern matching with a plurality of signatures summarized as a single intrusion...http://www.google.de/patents/US7793093?utm_source=gb-gplus-sharePatent US7793093 - Communications state transition monitoring method and communications state transition monitoring device utilizing the same