Young Hee Park, Douglas S. Reeves. Identification of Bot Commands by Run-Time Execution Monitoring. In Twenty-Fifth Annual Computer Security Applications Conference, ACSAC 2009, Honolulu, Hawaii, 7-11 December 2009. pages 321-330, IEEE Computer Society, 2009. [doi]