Causality reasoning about network events for detecting stealthy malware activities
Web tap: detecting covert web traffic