The Camnep system operational flow. Details inside a single container show the detection agent A and B determining the anomalies and trustfulness of individual flows. An aggregation agent provides the final result, which is selected from the pool of aggregation agents by the incident agents that probe the system´s response to known problematic attacks and known false positive cases.
