Method and system for detecting anomalies in a portable document format (PDF) document

A method for analyzing a portable document format (PDF) document, the method comprising:

• modifying, by a PDF analyzer, a background color of the PDF document to a second color to generate a modified PDF document, wherein the background color is determined by analyzing a color of the PDF document at an outer margin of the PDF document that is outside of a printable area and wherein the background color of the PDF document is modified by changing a rendering instruction associated with the PDF document;
• converting, by a noise removal module (NRM), the modified PDF document into an image, wherein the modified PDF document is sent by the PDF analyzer and the image includes multiple pixels that are arranged in a two dimensional map;
• making, by the NRM, a first determination that the image comprises a background noise, wherein the background noise is reduced by modifying a background-colored pixel of an area within the image;
• generating, by a fraud detection module (FDM), at least one image patch from the image, wherein the image is sent by the NRM,
• wherein generating the at least one image patch comprises:
• processing the image to identify a plurality of regions of interest, wherein each of the plurality of regions of interest comprises a pixel;
• generating a plurality of image patches, wherein each of the image patches is centered around one of the plurality of pixels, wherein the at least one image patch is one of the plurality of image patches;
• generating, by the FDM, an embedding for the at least one image patch, wherein the embedding is processed using a convolutional neural network (CNN) layer to classify the PDF document;
• making, by the FDM and based on an output of the CNN layer, a second determination that the PDF document is valid;
• extracting, by the FDM and based on the second determination, metadata associated with the PDF document;
• making, by the FDM and based on the metadata, a third determination that the PDF document is invalid, wherein the metadata specifies that the PDF document is generated using a valid PDF document generator based on a list of trusted PDF document generators in a database;
• and
• notifying, by the FDM, a user of a vendor environment (VE) about the second determination and the third determination using a graphical user interface (GUI) of the VE.

A method for analyzing a portable document format (PDF) document, the method comprising:

• modifying, by a PDF analyzer, a background color of the PDF document to a second color to generate a modified PDF document, wherein the background color is determined by analyzing a color of the PDF document at an outer margin of the PDF document that is outside of a printable area and wherein the background color of the PDF document is modified by changing a rendering instruction associated with the PDF document;
• converting, by a noise removal module (NRM), the modified PDF document into an image, wherein the modified PDF document is sent by the PDF analyzer and the image includes multiple pixels that are arranged in a two dimensional map;
• making, by the NRM, a first determination that the image comprises a background noise, wherein the background noise is reduced by modifying a background-colored pixel of an area within the image;
• generating, by a fraud detection module (FDM), at least one image patch from the image, wherein the image is sent by the NRM,
• wherein generating the at least one image patch comprises:
• processing the image to identify a plurality of regions of interest, wherein each of the plurality of regions of interest comprises a pixel;
• generating a plurality of image patches, wherein each of the image patches is centered around one of the plurality of pixels, wherein the at least one image patch is one of the plurality of image patches;
• generating, by the FDM, an embedding for the at least one image patch, wherein the embedding is processed using a convolutional neural network (CNN) layer to classify the PDF document;
• making, by the FDM and based on an output of the CNN layer, a second determination that the PDF document is invalid;
• and
• notifying, by the FDM, a user of a vendor environment (VE) about the second determination using a graphical user interface (GUI) of the VE.