4. A method for outputting data based on anomaly detection, comprising: receiving, using a hardware processor, an input dataset; identifying commonly occurring grams in the input dataset that substantially include distinct byte values; creating an input subset by removing the identified commonly occurring grams from the input dataset; determining whether the input dataset is likely to be anomalous by applying the input subset to a binary anomaly detection model, wherein the binary anomaly detection model is represented using a Bloom filter; and outputting the input dataset based on the likelihood that the input dataset is anomalous.
5. The method of claim 4 , wherein the Bloom filter contains grams other than the commonly occurring grams that substantially include distinct byte values.