Collaborative pattern recognition system

An apparatus, comprising:

• a collaborative pattern recognition module configured to detect anomalies with a transaction classifying action augmented with expert criteria in response to an erroneous classification, comprising:
• a processor;
• and,
• a memory that is not a transitory propagating signal, the memory operably coupled with the processor and encoding computer readable instructions, including processor executable program instructions, the computer readable instructions accessible to the processor, wherein the processor executable program instructions, when executed by the processor, cause the processor to perform operations comprising:
• classify a transaction as anomalous or not anomalous as a function of a predictive analytic model configured to detect anomalies;
• generate a rule based on expert analysis of a limited number of data samples to classify as anomalous a transaction erroneously classified as not anomalous;
• augment the predictive analytic model with the generated rule;
• and,
• deploy the augmented predictive analytic model to automatically identify an attack early based on classifying as anomalous a transaction matching the generated rule in a live transaction stream.