A company wants to protect a web-based application against application-layer attacks by monitoring the inputs, outputs, and internal state of the application. T...