As already said, I’m not familiar with the dataset and paper, but since the test set contains more attack types, which are neither in the attack_map, nor in the table, you could just drop these types.