Bayesian bot detection based on DNS traffic similarity
A multifaceted approach to understanding the botnet phenomenon