15. The method of claim 12 , wherein the anomalous query comprises injected code and non-injected code, and wherein converting the anomalous database query into the characteristic representation further comprises converting the anomalous database query into a characteristic representation that distinguishes between injected and non-injected portions of the query.
15. The method of claim 12 , wherein the anomalous query comprises injected code and non-injected code, and wherein converting the anomalous database query into the characteristic representation further comprises converting the anomalous database query into a characteristic representation that distinguishes between injected and non-injected portions of the query. 22. The method of claim 15 , wherein aggregating further comprises aggregating the anomalous database query with the other anomalous database queries by aggregating principally on the non-injected portion of the query.