1. A method for detecting network anomalies, the method comprising: receiving a training dataset of communication protocol messages having argument strings; determining a content and a structure associated with each of the argument strings; training a probabilistic model using the determined content and structure of each of the argument strings; receiving a communication protocol message having an argument string that is transmitted from a first processor to a second processor across a computer network; comparing the received communication protocol message to the probabilistic model; and determining whether the communication protocol message is anomalous.