[dhotson]

I wonder if some clever anomaly detection algorithms could help with this?

http://en.wikipedia.org/wiki/Anomaly_detection