Detecting Intra-enterprise Scanning Worms based on Address Resolution. - David Whyte; Paul C. van Oorschot; Evangelos Kranakis (ACSAC, 2005)

DNS-based Detection of Scanning Worms in an Enterprise Network. - David Whyte; Evangelos Kranakis; Paul C. van Oorschot (NDSS, 2005)

Addressing SMTP-Based Mass-Mailing Activity within Enterprise Networks. - David Whyte; Paul C. van Oorschot; Evangelos Kranakis (ACSAC, 2006)

Exposure Maps: Removing Reliance on Attribution During Scan Detection. - David Whyte; Paul C. van Oorschot; Evangelos Kranakis (HotSec, 2006)

Tracking Darkports for Network Defense. - David Whyte; Paul C. van Oorschot; Evangelos Kranakis (ACSAC, 2007)