Born, K. and D. A. Gustafson (2011), "Detecting and Visualizing Domain-Based DNS Tunnels Through N-Gram Frequency Analysis", Journal of Information System Security, 7 (2): 27–48.
Price: $7.99