LISABETH: automated content-based signature generator for zero-day polymorphic worms