Patent Document ID: 10122740
Application ID: 15137716
Patent Flag: 1

Claim One:
1. A method for handling network attacks implemented by a network traffic management system comprising one or more network security apparatuses, client devices, server devices, or analytic server devices, the method comprising: monitoring network traffic between clients and servers for signal data according to a stored security configuration that instructs a traffic management application on which particular types of signal data to identify, the stored security configuration and an associated anomaly model being obtained from one or more analytic servers; determining when there is an anomaly in the network traffic based on at least one of: application of the anomaly model to the signal data; or matching of at least a portion of the signal data to an anomalous traffic pattern received from the one or more analytic servers; and initiating a mitigation action when the determining indicates that there is an anomaly in the network traffic based on a current ratio of signal data types in the network traffic to a historical ratio of signal data types, wherein the traffic manager application utilizes one or more configuration updates obtained from the one or more analytic servers to update the stored security configuration for redefining which particular types of signal data to monitor.