26. A computer processor-implemented system for tracing a traitor from a circumvention device, the circumvention device comprising at least one compromised device key obtained from the traitor, the system comprising: a memory; a hypothesized model on a hypothesized set of device keys stored in the memory that models a hypothesis that the circumvention device comprises a hypothesized set of device keys; a significance module stored in the memory that passes the hypothesized model to a subset tracing method to identify a compromised device key; an update module stored in the memory that removes the compromised device key, adding new keys to the hypothesized set of device keys and updating the hypothesized model until a MKB created on the hypothesized model can disable the circumvention device; a detection module stored in the memory that iteratively detects additional compromised device keys from the set of compromised device keys, until the compromised device keys in the set of compromised device keys are identified so as to disable the circumvention device; an encryption module stored in the memory that encrypts the selected test; a circumvention device model module stored in the memory for generating a circumvention device model that models a behavior of the circumvention device, wherein the circumvention device model includes a set of tests from which the test is selected, a set of key sets comprising one key set for each of the set of tests, and a respective probability for each of the key sets indicating likelihood, based on a stored history of iterative tests including said set of tests, that the circumvention device will play the one of the set of tests associated with the key set; a test selection module stored in the memory for selecting a test based on the hypothesized model and the circumvention device model to apply to the circumvention device; a hypothesis update module stored in the memory for receiving a response from the circumvention device, the response indicating a success of the test in playing a protected content on the circumvention device; the hypothesis update module updating the hypothesized model using the received response, the selected test, a current version of the hypothesized model, and a current version of the circumvention device model for selecting at least one test that identifies the compromised device keys obtained from the traitor, wherein the system incorporates predetermined hypotheses regarding hypothetical compromised keys; and the significance module further for testing the hypothesized model to determine the strength of the belief that the compromised device key is contained in the circumvention device.
26. A computer processor-implemented system for tracing a traitor from a circumvention device, the circumvention device comprising at least one compromised device key obtained from the traitor, the system comprising: a memory; a hypothesized model on a hypothesized set of device keys stored in the memory that models a hypothesis that the circumvention device comprises a hypothesized set of device keys; a significance module stored in the memory that passes the hypothesized model to a subset tracing method to identify a compromised device key; an update module stored in the memory that removes the compromised device key, adding new keys to the hypothesized set of device keys and updating the hypothesized model until a MKB created on the hypothesized model can disable the circumvention device; a detection module stored in the memory that iteratively detects additional compromised device keys from the set of compromised device keys, until the compromised device keys in the set of compromised device keys are identified so as to disable the circumvention device; an encryption module stored in the memory that encrypts the selected test; a circumvention device model module stored in the memory for generating a circumvention device model that models a behavior of the circumvention device, wherein the circumvention device model includes a set of tests from which the test is selected, a set of key sets comprising one key set for each of the set of tests, and a respective probability for each of the key sets indicating likelihood, based on a stored history of iterative tests including said set of tests, that the circumvention device will play the one of the set of tests associated with the key set; a test selection module stored in the memory for selecting a test based on the hypothesized model and the circumvention device model to apply to the circumvention device; a hypothesis update module stored in the memory for receiving a response from the circumvention device, the response indicating a success of the test in playing a protected content on the circumvention device; the hypothesis update module updating the hypothesized model using the received response, the selected test, a current version of the hypothesized model, and a current version of the circumvention device model for selecting at least one test that identifies the compromised device keys obtained from the traitor, wherein the system incorporates predetermined hypotheses regarding hypothetical compromised keys; and the significance module further for testing the hypothesized model to determine the strength of the belief that the compromised device key is contained in the circumvention device. 27. The system of claim 26 , wherein the test comprises a forensic media key block that obtains informativeness data about the compromised device key, by observing the response.