They should examine rate of flow, average time between orders, balance between buy and sell orders, and order sizes, to determine whether the order flow has become anomalous.
FORBES: After the Knight Capital Catastrophe, Throttle the Traders, Not the Markets