Intrusion Detection as Passive Testing: Linguistic Support with TTCN-3 (Extended Abstract)