Detecting encrypted botnet traffic
A Case Study of the Rustock Rootkit and Spam Bot