A system and method for detecting an abnormal trading condition of a security uses real-time and estimated values of one or more variables associated with the condition of the security to generate one or more analytic metrics that are compared to empirical distributions based on one or more peer groups for the security. An indicator can then be displayed to a trader as an indication of the abnormal condition.