Hi, Coming late into this conversation, but what about using statistical learning filtering instead of an expert system? We have done it using an anomaly detection algorithm we have developed:
http://eprints.sics.se/3591/ (link to paper https://daisy.dsv.su.se/fil/visa?id=24833) /Tomas http://www.sics.se
