Intuitively, if events inside a document are organized around the core content, a model capturing their relations well should easily identify the intruder(s).
we take a bag of unordered events {O 1 , O 2 , .