Thwarting zero-day polymorphic worms with network-level length-based signature generation