Keep your friends close: the necessity for updating an anomaly sensor with legitimate environment changes