Bothunter: Detecting malware infection through IDS-driven dialog correlation,” (2006)

by G Gu, P Porras, V Yegneswaran, M Fong, W Lee
Venue:Proc. of the 16th USENIX Security Symposium,