@INPROCEEDINGS{
       Author = {Zdrnja, B. and Brownlee, N. and Wessels, D.}, 
       Title = {{Passive Monitoring of DNS Anomalies}},
       BookTitle = {Conference on Detection of Intrusions & Malware, and Vulnerability Assessment (DIMVA)},
       Volume = {4579},
       Pages = {129-139},
       Institution = {University of Auckland, New Zealand and Cooperative Association for Internet Data Analysis (CAIDA)},
       Month = {Jul},
       Year = {2007},
       Keywords = {passive data analysis   measurement methodology   dns}
}