摘要：The World Wide Web is the most prevalence information system on the Internet. That makes HTTP protocol becomes attractive target for cybercrimes take it as communication environment to transmit malicious contents or forbidden information such as user private information. This raises the demand for monitoring and analysis of HTTP traffic in network. In this paper, monitoring features are extracted from HTTP basic properties, based on these an application for monitoring and analysis of HTTP communications is proposed. The system will help network and system administrators to early detect threads in HTTP environment by clustering and identifying HTTP traffic. From there, necessary and suitable decides will be acted.
