I remember there was a DEFCON talk about anti-cheating measure for counter strike and speaker just noted casually that Valve just scans all processes running on your machine during a match and determines what's a cheating process and what is not via a blacklist. Which begs the question what can't Valve do vis Steam?