Efficient detection of suspicious DNS traffic by resolver separation per application program | IEEE Conference Publication | IEEE Xplore