DoWitcher: Effective Worm Detection and Containment in the Internet Core