Fraud detection in a cable television

1. A method comprising:

applying logic embodied in machine memory to determine if a CPE response is inconsistent with prior CPE responses;

if the CPE response is inconsistent with prior CPE responses, next applying logic embodied in machine memory to perform a distance test to determine if the CPE device is co-located with another device of the same subscriber; and

normalizing results of the distance test according to a make and/or model of the CPE device.

2. The method of claim 1 , further comprising:

correcting results of the distance test according to anomalies of a network region comprising the CPE device.

3. The method of claim 1 , further comprising:

determining if results of the distance test are consistent with known network maintenance activity.

4. The method of claim 1 , further comprising:

normalizing results of the distance test according to a hardware and/or software version of the CPE device.

5. The method of claim 1 , further comprising:

formulating an indication of fraudulent activity based upon results of the distance test and one or more subscriber attributes.

6. The method of claim 5 , further comprising:

formulating an indication of fraudulent activity based upon results of the distance test and one or more of a length of subscriber service and subscriber credit rating.

7. The method of claim 1 , wherein performing a distance test further comprises:

the distance test comprising tests from multiple distributed locations within the cable plant.