A Method for Deriving and Testing Malicious Behavior Detection Rules. - Raimo Hilden; Kimmo Hätönen (TrustCom/BigDataSE/ISPA (1), 2015)