Cognitive decision system for security and log analysis using associative memory mapping in graph database

One or more non-transitory computer-readable storage media coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:

• receiving, from an external application, a request for a recommended action regarding entities associated with a source system;
• extracting information regarding the entities and relationships between the entities from a data source in which the source system persists transaction and security data;
• constructing an associative memory map from the extracted information, wherein the associative memory map describes the entities as nodes and characterizes a strength of the relationships between each entity;
• selecting a subgraph of nodes from the associative memory map based on a result of employing a vector to search the nodes in the associative memory map, the vector generated based on the requested recommended action;
• identifying the nodes most relevant to the requested recommend action base on a shortest paths of traversal in the selected subgraph of nodes;
• determining the requested recommended action based on an event identified in the relationships between the identified most relevant nodes;
• and
• transmitting the recommended action to the external application.

A system, comprising:

• one or more processors;
• and
• a computer-readable storage device coupled to the one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• receiving, from an external application, a request for a recommended action regarding entities associated with a source system;
• extracting information regarding the entities and relationships between the entities from a data source in which the source system persists transaction and security data;
• constructing an associative memory map from the extracted information, wherein the associative memory map describes the entities as nodes and characterizes a strength of the relationships between each entity;
• selecting a subgraph of nodes from the associative memory map based on a result of employing a vector to search the nodes in the associative memory map, the vector generated based on the requested recommended action;
• identifying the nodes most relevant to the requested recommend action base on a shortest paths of traversal in the selected subgraph of nodes;
• determining the requested recommended action based on an event identified in the relationships between the identified most relevant nodes;
• and
• transmitting the recommended action to the external application.