Anomaly Detection with Partially Observed Anomalies
a geometric framework for unsupervised anomaly detection : detecting intrusions in unlabeled data .