1. A system comprising: a receiver operatively coupled to an application server to receive a rules set to detect fraud; and a server, operatively coupled to the application server, to map the rules set to a data set, and to map the success data to each members of the rules set; the server further to order the members of the data set by giving priority to those members of the data set with a greatest probability for being fraudulent based upon the success data of each member of the rule set in detecting fraud.