A multi-step outlier-based anomaly detection approach to network-wide traffic
Toward a more practical unsupervised anomaly detection system