Most botnets employ domain generation algorithms (DGAs) to avoid detection. The DGA employs technique to frequently change the a command and control server (C&C) domain name, in order to hide the callback communication from the bot to the C&C. What are the best practices to detect the DGA bot callbacks and to set proper security measures?