Identifying botnets by capturing group activities in DNS traffic
Distribution of the number of citations over years.