Nikolaos Chatzis Mass MailingWorm Detection by Means of Situation Aware DNS. 279-286 2007 ISADS http://doi.ieeecomputersociety.org/10.1109/ISADS.2007.46 conf/isads/2007 db/conf/isads/isads2007.html#Chatzis07