diff --git a/lib/rate-anomaly-detector.sh b/lib/rate-anomaly-detector.sh
index 1a13622..0081573 100644
--- a/lib/rate-anomaly-detector.sh
+++ b/lib/rate-anomaly-detector.sh
@@ -33,9 +33,9 @@ detect_rate_anomaly() {
     fi
 
     # Count requests in different time windows
-    local req_1sec=$(awk -v cutoff="$((current_time - 1))" '$1 > cutoff' "$rate_file" 2>/dev/null | wc -l)
-    local req_10sec=$(awk -v cutoff="$((current_time - 10))" '$1 > cutoff' "$rate_file" 2>/dev/null | wc -l)
-    local req_60sec=$(awk -v cutoff="$((current_time - 60))" '$1 > cutoff' "$rate_file" 2>/dev/null | wc -l)
+    local req_1sec=$(awk -v cutoff="$((current_time - 1))" '$1 > cutoff' -- "$rate_file" 2>/dev/null | wc -l)
+    local req_10sec=$(awk -v cutoff="$((current_time - 10))" '$1 > cutoff' -- "$rate_file" 2>/dev/null | wc -l)
+    local req_60sec=$(awk -v cutoff="$((current_time - 60))" '$1 > cutoff' -- "$rate_file" 2>/dev/null | wc -l)
 
     local anomaly_score=0
     local anomaly_type="NORMAL"