Optimized invariant representation of network traffic for detecting unseen malware variants
BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection