Characterization of Covert Channels in DNS
On the analysis of the Zeus botnet crimeware toolkit