https://1library.net/document/qm36rm8y-session-based-hidden-markov-model-network-anomaly-detection.html