GMAD: Graph-based Malware Activity Detection by DNS traffic analysis
BotHunter: Detecting Malware Infection Through IDSDriven Dialog Correlation