dns tunneling detection techniques - classification , and theoretical comparison in case of a real apt campaign .
DNS tunneling detection through statistical fingerprints of protocol messages and machine learning