Bridging the Gap between Data-Flow and Control-Flow Analysis for Anomaly Detection