Also check SANS and its reading room: http://www.sans.org/reading_room/ In particular: http://www.sans.org/reading_room/whitepapers/malicious/1299.php > 2. OT: Need citations to technical papers/books on Botnets > (Luigi de Guzman)