1. A malicious traffic sensor adapted for coupling with a communication network, comprising: one or more virtual computing systems to process network data that is associated with communications traffic received from the communication network and directed to a destination device and comprises one or more suspicious characteristics associated with malware, each of the one or more virtual computing systems includes a virtual machine to process the network data; and a hardware-based controller communicatively coupled to the one or more virtual computing systems, the controller being configured to monitor behaviors of the one or more virtual computing systems during processing of the network data, determine, during processing of the network data, that at least one of the monitored behaviors represents an anomalous behavior, the anomalous behavior includes an unauthorized activity that is conducted in response to processing of the network data within the one or more virtual computing systems that indicates the network data includes malware, and generate a signature that characterizes the malware.