1. A vulnerability detection system comprising: an interface configured to receive a plurality of data transmissions at a computer; a translation module configured to identify at least one primitive associated with each of the data transmissions; an aggregation module configured to aggregate each of the data transmissions, including aggregating the at least one primitive associated with each of the data transmissions; an analysis module configured to generate an analysis output identifying a match between the aggregated primitives and a policy; and an enforcement module configured to generate a security alert based on the analysis output.