From throw-away traffic to bots: detecting the rise of dga-based malware
BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection