1. A system for latency-based policy activation, comprising: a processor of a network device configured to: collect a plurality of latency measures associated with monitored network communications; correlate the plurality of latency measures associated with the monitored network communications to detect anomalous network activity based on a profile, comprising to: perform one or more of the following: A) determine whether a latency of an Internet Control Message Protocol (ICMP) ping between the network device and a monitored service's IP address exceeds a first predetermined threshold; and in response to a determination that the latency of the ICMP ping between the network device and the monitored service's IP address exceeds the first predetermined threshold, determine that the latency of the ICMP ping is abnormal; B) determine whether a latency between a new TCP session's SYN and a server's SYN/ACK response exceeds a second predetermined threshold; and in response to a determination that the latency between the new TCP session's SYN and the server's SYN/ACK response exceeds the second predetermined threshold, determine that the latency between the new TCP session's SYN and the server's SYN/ACK response is abnormal; C) determine whether a latency between a new UDP session's initial packets exceeds a third predetermined threshold; and in response to a determination that the latency between the new UDP session's initial packets exceeds the third predetermined threshold, determine that the latency between the new UDP session's initial packets is abnormal; or D) determine whether a latency of an HTTP GET operation or an HTTP POST operation exceeds a fourth predetermined threshold; and in response to a determination that the latency of the HTTP GET operation or the HTTP POST operation exceeds the fourth predetermined threshold, determine that the latency of the HTTP GET operation or the HTTP POST operation is abnormal; perform a mitigation response to the anomalous network activity based on a policy; and a memory coupled to the processor and configured to provide the processor with instructions.