NgViz: detecting DNS tunnels through n-gram visualization and quantitative analysis. - Kenton Born; David Gustafson (CSIIRW, 2010)

Browser-Based Covert Data Exfiltration - Kenton Born (CoRR, 2010)

Detecting DNS Tunnels Using Character Frequency Analysis - Kenton Born; David Gustafson (CoRR, 2010)