1. A method of using a computer to detect anomalies in the data traffic of a mobile device, the computer performing the steps of: collecting from the mobile device, usage data relating to data usage for the mobile device for a given time period; setting threshold values based at least in part on a mobile device data plan and an amount of data used by the mobile device within a set time period and on historical usage data of the mobile device, where the weighting afforded the historical usage data is related to the amount of stored history; comparing the usage data against the threshold values; identifying an anomaly if a statistic of the usage data exceeds a corresponding threshold of the threshold values; updating the threshold values based on a running average of each statistic of the usage data; the computer further performing the steps of: saving existing usage data or predicted data or both; generating a graphical user interface including at least one statistic of the usage data; overlaying at least one statistic of the existing usage data or predicted data or both onto the at least one statistic of the usage data.