Cyber Anomaly Detection Using Graph-node Role-dynamics