Gregory J. Conti Kulsoom Abdullah Passive visual fingerprinting of network attack tools. 45-54 2004 conf/vizsec/2004 VizSEC http://doi.acm.org/10.1145/1029208.1029216 db/conf/vizsec/vizsec2004.html#ContiA04