By analysis of network traffic (packets), frequent user behavior profiles are mined, and then by comparing the profile similarity, system behavior can be detected in real-time.

As any racing fan will attest, playing on the original iPad is fun due to the similarity in profile between the device and a steering wheel.

To deal with the similarity of spike temporal profile and frequency feature, a method was proposed to represent spike feature using wavelet analysis technique.