Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Botnet fingerprinting method based on anomaly detection in SMTP
  conversations   The paper presents the results obtained during research on detection of
unsolicited e-mails which are sent by botnets. The distinction from most of the
existing solutions is the fact that the presented approach is based on the
analysis of network traffic - the sequence and syntax of SMTP commands observed
during email delivery process. The paper presents several improvements for
detection of unsolicited email sources from different botnets (fingerprinting),
which can be used during network forensic investigation.

12
The categories of this paper are: nucl-th
30
The categories of this paper are: q-alg
7
The categories of this paper are: hep-th
22
The categories of this paper are: chao-dyn
11
The categories of this paper are: hep-lat
8
The categories of this paper are: hep-ex
19
The categories of this paper are: eess
32
The categories of this paper are: atom-ph
17
The categories of this paper are: q-fin
16
The categories of this paper are: stat
10
The categories of this paper are: q-bio
4
The categories of this paper are: cond-mat
28
The categories of this paper are: alg-geom
3
The categories of this paper are: physics
9
The categories of this paper are: nlin
33
The categories of this paper are: plasm-ph