Malware/botnet/APT detection, defense, and analysis