Anomaly based cyber security