Patent Document ID: 10158658
Application ID: 14960013
Patent Status: 1

Claim One:
1. A system comprising: one or more memories storing computer-executable instructions; and one or more hardware processors configured to execute the computer-executable instructions to: access security profile data including sets of previously generated anomaly values for a plurality of anomaly detection services configured to determine anomalous data associated with one or more levels of a network stack, the sets of previously generated anomaly values indicative of non-anomalous functioning of the plurality of anomaly detection services; receive a request at the plurality of anomaly detection services; generate, at the plurality of anomaly detection services, detected anomaly values associated with the request, the detected anomaly values indicative of confidence that the request is not anomalous; determine a difference between the detected anomaly values and the sets of previously generated anomaly values of the security profile data, the difference exceeding a threshold value; based on the difference, determine at least one detected anomaly value associated with the request that deviates from at least one of the sets of previously generated anomaly values of the security profile data; determine at least one anomaly detection service of the plurality of anomaly detection services associated with the at least one detected anomaly value deviating from the at least one of the sets of previously generated anomaly values of the security profile data; and execute a control action associated with the at least one anomaly detection service, the control action including reducing a weight associated with anomaly detection for one or more subsequent detected anomaly values received from the at least one anomaly detection service.