A system, method, and computer program product are provided for detecting and measuring changes in network behavior of communication networks utilizing real-time clustering algorithms. In use, network traffic associated with at least one communication network is received. Additionally, the network traffic is characterized and classified based on similarities in the network traffic utilizing one or more real-time clustering algorithms. Further, changes in network behavior of the at least one communication network are detected and measured utilizing information associated with the classified network traffic.