From throw-away traffic to bots: detecting the rise of dga-based malware
x - means : extending k - means with efficient estimation of the number of clusters .