Systems and methods for detecting the anomalies in a communications network

A system, comprising:

• one or more processors, coupled to memory, to:
• collect network data packets transmitted by a plurality of computing devices across a communications network;
• present a user interface on a user device, the user interface comprising a threshold calculation button and one or more fields each corresponding to a threshold for a different network characteristic of the communications network;
• receive a selection of the threshold calculation button from the user device;
• responsive to receiving the selection of the threshold calculation button:
• determine a threshold for each of the one or more fields based on the collected network data packets;
• and
• automatically populate each of the one or more fields with the threshold determined for the field, each threshold corresponding to a minimum value for detecting an attack on the communications network for the network characteristic corresponding to the field populated with the threshold;
• and
• detect an attack on the communications network using a first threshold that was automatically populated into a first field of the one or more fields.

A non-transitory computer readable storage medium comprising instructions stored thereon that, when executed by one or more processors, cause the one or more processors to:

• collect network data packets transmitted by a plurality of computing devices across a communications network;
• present a user interface on a user device, the user interface comprising a threshold calculation button and one or more fields each corresponding to a threshold for a different network characteristic of the communications network;
• receive a selection of the threshold calculation button from the user device;
• responsive to receiving the selection of the threshold calculation button:
• determine a threshold for each of the one or more fields based on the collected network data packets;
• and
• automatically populate each of the one or more fields with the threshold determined for the field, each threshold corresponding to a minimum value for detecting an attack on the communications network for the network characteristic corresponding to the field populated with the threshold;
• and
• detect an attack on the communications network using a first threshold that was automatically populated into a first field of the one or more fields.