8. A system executed by a processor for protecting client computers; comprising: an initial filter that gathers scripting-language-data from webpage data; a signature database of signatures of known scripting-language-data exploits; a parser that generates a parse tree from the scripting-language-data; a normalization and signature matching component that reduces a complexity of the parse tree, generates a representation of at least a portion of a structure of the parse tree, and prevents the scripting-language-data from reaching an intended recipient when the representation matches one of the signatures of known scripting-language-data exploits; and an analysis component that identifies characteristics of the scripting-language-data, scores the characteristics of scripting-language-data based upon a likelihood that the characteristics of the scripting-language-data are associated with malicious scripting-language data, and determines whether to block the scripting-language-data from reaching the intended recipient based upon a score of characteristics of a normalized scripting-language-data and a score of characteristics of inspection data based on the scripting language-data.
9. The system of claim 8 , wherein the normalization and signature matching component generates a hash representation of at least a portion of the structure of the parse tree.