Spamming botnets: signatures and characteristics
Hamsa: fast signature generation for zero-day polymorphic worms with provable attack resilience