1. A method for detecting malicious network traffic implemented by a network traffic management system comprising one or more anomaly detection apparatuses, server devices, or client devices, the method comprising: monitoring network traffic exchanged with a plurality of clients and a plurality of servers to obtain client-side signal data and determining when a current network traffic anomaly has occurred based on the monitoring; comparing at least a portion of the client-side signal data to a historical scoreboard database to identify one or more of a plurality of historical network traffic anomalies that correspond to the current network traffic anomaly, when the determining indicates that the current network traffic anomaly has occurred; analyzing the historical scoreboard database to determine when the current network traffic anomaly is a false positive based at least in part on whether one or more of the plurality of historical network traffic anomalies precede one of a plurality of server health anomalies identified in the historical scoreboard database; and initiating a mitigation action when the determining indicates that the network traffic anomaly is not a false positive.