Text this: Detecting TCP SYN flood attack based on anomaly detection