dns tunneling detection techniques - classification , and theoretical comparison in case of a real apt campaign .
Internet traffic classification using bayesian analysis techniques