1. A method of monitoring a data storage system for malicious application workloads, the method comprising: collecting, by a computing device, a set of values of a data storage parameter (hereinafter “parameter”) over a particular period of time, each set of values being indicative of a storage-related state of the data storage system over the particular period of time, wherein collecting the set of values over the particular period of time includes collecting a number of storage allocation requests sampled at pre-specified intervals over the particular period of time; performing a comparison operation, by the computing device, on (i) the set of values of the parameter and (ii) a set of historical values of the parameter over another period of time prior to the particular period of time and having a length substantially the same as the particular period of time, the set of historical values of the parameter being representative of values of the storage-related state of the data storage system substantially free of malicious application workloads, the comparison operation providing a comparison result indicative of a similarity between the set of values of the parameter and the set of historical values of the set of the parameters; and based on the comparison result, providing, by the computing device, a decision as to whether the data storage system is accessed by a malicious application workload; wherein: performing the comparison operation includes generating a difference between the set of values of the parameter over the particular period of time and the set of historical values of the parameter over the other period of time by: fitting the set of values of the parameter over the particular period of time to a first trendline, fitting the set of historical values of the parameter over the other period of time to a second trendline, calculating respective slopes of the first and second trendlines, and determining a difference between the respective slopes of the first and second trendlines as the comparison result; providing the decision as to whether the data storage system is accessed by a malicious application workload includes comparing the difference to a threshold difference, the difference being greater than the threshold difference indicating that the data storage system is accessed by a malicious application workload, the difference being less than the threshold difference indicating that the data storage system is not accessed by a malicious application workload; the method further comprises, based on the comparison result, providing, by the computing device, a further decision as to whether the data storage system is in need of a reconfiguration; and providing the further decision as to whether the data storage system is in need of a reconfiguration includes: receiving feedback as to whether the data storage system has actually been accessed by a malicious application workload when the difference is greater than the threshold difference, when the data storage system has not been accessed by a malicious application workload, providing as the further decision that the data storage system is in need of the reconfiguration, and when the data storage system has been accessed by a malicious application workload, providing as the further decision that the data storage system is to be left without reconfiguration.