The first idea that hits is that such a thing could make (very) good use of a mixture of decaying lists and LRU ordering; probably much like tc's ring priority works, a decaying list could rise and fall in ordering based on some measure of recency, and an assessment/overview of the most-recent (most-hit, in this worldview) could be used to extend storm control measures