Network traffic evolution for the test data
It includes one month of traffic. As in the calibration data, it clearly shows the traffic periodicity.
The red dots show that some additional type of anomalies/attacks, other than those synthetically generated, appear in this period. These anomalies were detected
by several state-of-the-art anomaly detectors. For example, in this case, the biggest red dots correspond with an email spam campaing.