Figure 3From: A quality metric for IDS signatures: in the wild the size matters Example of good Snort signature used to detect a beacon frame sent by a Blackenergy bot to its controller. Back to article page