Beehive: large-scale log analysis for detecting suspicious activity in enterprise networks
BotSniffer: Detecting Botnet Command and Control Channels in Network Traffic