Detecting botnet by anomalous traffic
BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection