Ourmon and Network Monitoring Performance. - James R. Binkley; Bart Massey (USENIX ATC, FREENIX Track, 2005)

An Algorithm for Anomaly-based Botnet Detection. - James R. Binkley; Suresh Singh 001 (SRUTI, 2006)