Phillip Porras, “Directions in Network-Based Security Monitoring”, IEEE Security & Privacy, vol.7, no. 1, pp. 82-85, January/February 2009, doi:10.1109/MSP.2009.5
This article outlines some recently emerging research in network-based malicious software detection. The author discusses differences between traditional network intrusion detection and these new techniques, and highlights a new freely available tool called BotHunter.