>>intelligent proxy

sounds to me like it should be some sort of adaptive system. Learn the behaviour of the specific system it is running on and flag oddities or substantial changes in behaviour...