Beehive: large-scale log analysis for detecting suspicious activity in enterprise networks
A multifaceted approach to understanding the botnet phenomenon