Text this: Evaluating Security Anomalies by Classifying Traffic Using a Multi-Layered Model