1. A system comprising: a computing cloud comprising at least one data storage unit and at least one processing unit; wherein the computing cloud is configured to connect to at least one client and monitor traffic associated with the at least one client; and wherein the computing cloud is further configured to determine an operational mode of the client, compare the monitored traffic with an anticipated traffic pattern associated with the operational mode, and determine if a security threat is indicated based on the comparison.