1. A method for detecting anomalies in an infrastructure, the method comprising: providing a computationally-intelligent analysis model to model a behaviour of at least one detection instrument in said infrastructure; inputting control instrument data into said analysis model, said control instrument data being provided by control instruments in said infrastructure; outputting an estimated behaviour for said at least one detection instrument from said analysis model; comparing actual data from said at least one detection instrument to said estimated behaviour and generating a set of residuals representing a difference between said actual data and said estimated behaviour; and identifying anomalies when said residuals exceed a predetermined threshold.