publication venue for Conficker and beyond: a large-scale empirical study 2010 Active Botnet Probing to Identify Obscure Command and Control Channels 2009 A Taxonomy of Botnet Structures 2007 Worm Detection, Early Warning and Response Based on Local Victim Information 2004
