1. A system for latency-based policy activation, comprising: a processor of a network device configured to: collect a plurality of latency measures associated with monitored network communications; correlate the plurality of latency measures associated with the monitored network communications to detect anomalous network activity based on a profile, comprising to: determine whether a latency of a specific application function exceeds a predetermined threshold; and in response to a determination that the latency of the specific application function exceeds the predetermined threshold, determine that the latency of the specific application function is abnormal; and perform a mitigation response to the anomalous network activity based on a policy; and a memory coupled to the processor and configured to provide the processor with instructions.