Pattern recognition would be needed due to the sheer number of potential vectors for evil numbers (auto-assigned client-side tcp port numbers, 'evil bit' tcp flag, network-order bitstream integers, packed binary objects, memory allocation/access, user ids, etc). There's a lot of potential mysticism we haven't touched on with either cryptography or AI....