LI-HML detector: a unified framework for network traffic attack classification | Synapse