Detection of common patterns in user generated content with applications in fraud detection
AssigneeData Visor Inc.
InventorsAlexandros Vlissidis, Nicola Corradi, Fang Yu, Olivia Wang
Life of this patent
Estimating the term…
Abstract
Methods, systems, and apparatus, including computer programs encoded on computer storage media, for detecting suspicious accounts. One of the methods includes identifying one or more potential clusters of malicious accounts; for each cluster, processing a collection of content associated with each account of the cluster, the processing comprising applying a plurality of models in series to determine whether the collection of content indicates a common pattern; and based on the respective determinations, classifying the accounts of each cluster as ordinary or suspicious.
Claims17
A method comprising:
- identifying one or more potential clusters of malicious accounts;
- for each cluster, processing a collection of content associated with each account of the cluster, the processing comprising applying a plurality of models in series to determine whether the collection of content indicates a common pattern, the applying the plurality of models in series comprising:
- applying a plurality of instances of a single user model to respective portions of the collection of content,
- applying a multi-users model to the output of the plurality of instances of the single user model, and
- applying a group model to the output of the multi-users model;
- and
- based on the respective determinations, classifying the accounts of each cluster as either ordinary or suspicious.
A fraud detection system comprising:
- one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising:
- identifying one or more potential clusters of malicious accounts;
- for each cluster, processing a collection of content associated with each account of the cluster, the processing comprising applying a plurality of models in series to determine whether the collection of content indicates a common pattern, the applying the plurality of models in series comprising:
- applying a plurality of instances of a single user model to respective portions of the collection of content,
- applying a multi-users model to the output of the plurality of instances of the single user model, and
- applying a group model to the output of the multi-users model;
- and
- based on the respective determinations, classifying the accounts of each cluster as either ordinary or suspicious.
One or more non-transitory computer storage media encoded with computer program instructions that when executed by one or more computers cause the one or more computers to perform operations comprising:
- identifying one or more potential clusters of malicious accounts;
- for each cluster, processing a collection of content associated with each account of the cluster, the processing comprising applying a plurality of models in series to determine whether the collection of content indicates a common pattern, the applying the plurality of models in series comprising:
- applying a plurality of instances of a single user model to respective portions of the collection of content,
- applying a multi-users model to the output of the plurality of instances of the single user model, and
- applying a group model to the output of the multi-users model;
- and
- based on the respective determinations, classifying the accounts of each cluster as either ordinary or suspicious.
Dependencies are inferred from the claim text.