Causality reasoning about network events for detecting stealthy malware activities
ReSurf: Reconstructing web-surfing activity from network traffic