US Patent 10158658 System for determining network anomalies

Described are techniques for determining abnormalities in the transmission of data using one or more networks. Responsive to a request or other data, multiple anomaly detection services may determine anomaly values indicative of the likelihood that the request is anomalous. An aggregate value may also be determined based on at least a subset of the anomaly values. Based on correspondence between the aggregate value or any of the anomaly values and threshold data, the request may be determined to be anomalous or non-anomalous. The anomaly values may also be compared to security profile data indicative of sets of values determined based on previous requests. If the current anomaly values do not correspond to the security profile data, this determination may indicate that one or more of the anomaly detection services is compromised. Subsequent values from compromised anomaly detection services may be disregarded until remedied.