The case for in-the-lab botnet experimentation: creating and taking down a 3000-node botnet