Using anomaly detection based techniques to detect HTTP-based botnet C&C traffic
BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection