Specification and initial version of anomaly detection routines

Summary
Provides a detailed description of anomaly detection techniques to allow for the identification of specific traffic patterns. D3.3 is related to T3.5.