Monitoring ecommerce transactions using transaction metrics statistics for different combinations of transaction attributes and values

A computer program product, comprising:

• a non-transitory computer readable storage medium comprising computer readable program code embodied in the medium that when executed by a processor of an application analysis computer causes the processor to perform operations comprising:
• receiving eCommerce transaction reports, each of the reports containing transaction metrics and transaction attributes having values;
• generating a statistic separately for each different type of the transaction metrics across the reports based on the values of the transaction attributes;
• identifying one of the statistics, for one type of the transaction metrics, that has changed at least a threshold amount between two time intervals;
• selecting the one type of the transaction metrics for analysis;
• for each combination of a different type of the transaction attributes and a different value among the values occurring for the type of the transaction attribute,
• generating a transaction metric statistic for the selected type of the transaction metrics from the reports, within a time interval, having the combination of the type of the transaction attribute and the value, and
• incrementing a counter that tracks a number of occurrences of the combination of the type of the transaction attribute and the value among the reports;
• training an analytical model of the eCommerce transactions based on the values of the transaction attributes for the transaction metric statistics for the selected type of the transaction metrics and based on the counters that track a number of occurrences of the combination of the type of the transaction attribute and the value among the reports;
• and
• outputting risk scores from the analytical model based on content of eCommerce transactions that are input to the analytical model.