John Hernandez and other member’s work on the Nugache botnet “Analysis of the Storm and Nugache Trojans: P2P Is Here” in ;login: The USENIX Magazine December 2007, Volume 32, Number 6
Paper: Analysis of the Storm and Nugache Trojans: P2P Is Here (PDF)