Human behavior clustering for anomaly detection