14. A computer program product stored on a non-transitory computer storage medium having a plurality of executable instruction codes stored on a computer readable medium for tracing a traitor from a circumvention device, the circumvention device comprising at least one compromised device key obtained from the traitor, the computer program product comprising: a set of instruction codes for generating a hypothesized model on a hypothesized set of device keys that models a hypothesis that the circumvention device comprises a hypothesized set of device keys; a set of instruction codes for passing the hypothesized model and invoking a subset tracing method to identify the compromised device key; a set of instruction codes for iteratively detecting additional compromised device keys from the set of compromised device keys, until a majority of the compromised device keys in a set of compromised device keys are identified so as to disable the circumvention device; a set of instruction codes for generating a circumvention device model that models a behavior of the circumvention device, wherein the circumvention device model comprises a set of tests from which the test is selected, a set of key sets comprising one key set for each of the set of tests, and a probability for each of the key sets indicating a likelihood that the circumvention device will play the one of the set of tests associated with the key set, with the probability based on a history of iterative tests including said set of tests; a set of instruction codes for storing the history of the iterative tests; a set of instruction codes for selecting a test based on the hypothesized model and the circumvention device model to apply to the circumvention device; a set of instruction codes for encrypting the selected test; a set of instruction codes for receiving a response from the circumvention device, the response indicating a success of the test in playing a protected content on the circumvention device; a set of instruction codes for updating the hypothesized model using the received response, the selected test, a current version of the hypothesized model, and a current version of the circumvention device model for selecting at least one test that identifies compromised device keys obtained from the traitor; and a set of instruction codes for testing the hypothesized model to determine the strength of the belief that the compromised device key is contained in the circumvention device.
14. A computer program product stored on a non-transitory computer storage medium having a plurality of executable instruction codes stored on a computer readable medium for tracing a traitor from a circumvention device, the circumvention device comprising at least one compromised device key obtained from the traitor, the computer program product comprising: a set of instruction codes for generating a hypothesized model on a hypothesized set of device keys that models a hypothesis that the circumvention device comprises a hypothesized set of device keys; a set of instruction codes for passing the hypothesized model and invoking a subset tracing method to identify the compromised device key; a set of instruction codes for iteratively detecting additional compromised device keys from the set of compromised device keys, until a majority of the compromised device keys in a set of compromised device keys are identified so as to disable the circumvention device; a set of instruction codes for generating a circumvention device model that models a behavior of the circumvention device, wherein the circumvention device model comprises a set of tests from which the test is selected, a set of key sets comprising one key set for each of the set of tests, and a probability for each of the key sets indicating a likelihood that the circumvention device will play the one of the set of tests associated with the key set, with the probability based on a history of iterative tests including said set of tests; a set of instruction codes for storing the history of the iterative tests; a set of instruction codes for selecting a test based on the hypothesized model and the circumvention device model to apply to the circumvention device; a set of instruction codes for encrypting the selected test; a set of instruction codes for receiving a response from the circumvention device, the response indicating a success of the test in playing a protected content on the circumvention device; a set of instruction codes for updating the hypothesized model using the received response, the selected test, a current version of the hypothesized model, and a current version of the circumvention device model for selecting at least one test that identifies compromised device keys obtained from the traitor; and a set of instruction codes for testing the hypothesized model to determine the strength of the belief that the compromised device key is contained in the circumvention device. 16. The computer program product of claim 14 , wherein the test comprises a forensic media key block that obtains informativeness data about the compromised device key, by observing the response.