Detection of stealthy malware activities with traffic causality and scalable triggering relation discovery
Link mining: a survey