Non-intrusive Runtime Anomaly Detection for Embedded Systems