1. A method comprising: monitoring, by a device in a network, one or more metrics regarding network traffic associated with a particular application; detecting, by the device, an application-centric anomaly based on the monitored one or more metrics; and causing, by the device, an anomaly mitigation action to be performed in the network, in response to detecting the application-centric anomaly.