Using Generalization and Characterization Techniques in the Anomaly-based Detection of Web Attacks