Establishment and mapping of heterogeneous anomalies in network intrusion datasets