Methods, systems, and computer readable media for detecting network service anomalies

A system for detecting network service anomalies, the system comprising:

• one or more processors and memory storing executable instructions for the one or more processors;
• a visibility behavior analysis system (VBAS) implemented on the one or more processors and configured for:
• during a learning phase:
• detecting a client initiating a first network interaction with an application and recording a start time for the first network interaction with the application;
• determining that the first network interaction with the application has ceased and recording an end time for the first network interaction;
• and
• determining, based on the start time and the end time, a first application interaction rate for the first network interaction with the application;
• and
• during a detection phase:
• detecting the client initiating a second network interaction with the application;
• determining a second application interaction rate for the second network interaction;
• and
• determining that a network service anomaly occurred during the second network interaction based on the first application interaction rate and the second application interaction rate, wherein determining that the network service anomaly occurred comprises determining that the second network interaction has ceased, building a feature vector comprising the second application interaction rate and one or more other metrics observed during the second network interaction, supplying the feature vector to a machine learning model trained on one or more previous interactions with the application, and using an output of the machine learning model to determine that the network service anomaly occurred during the second network interaction.