| 摘要 |
In one embodiment, a method includes accessing a plurality of classified event profiles including a classification that identifies whether the corresponding classified event profile is associated with fraud or legitimate. The method also includes accessing a first cluster of classified event profiles each identified as being associated with fraud, and a second cluster of classified event profiles each identified as being legitimate. The method further includes determining a plurality of first sub-clusters of classified event profiles from the first cluster of classified event profiles, and a plurality of second sub-clusters of classified event profiles from the second cluster of classified event profiles. The method still further includes conditioning a plurality of fraud-detection algorithms, each fraud-detection algorithm corresponding to a particular specified parameter, and each fraud-detection algorithm being conditioned using a first sub-cluster of classified event profiles and a second sub-cluster of classified event profiles. |
| 主权项 |
1. A method comprising, by one or more processors associated with one or more computing devices:
accessing, by one or more of the processors, a plurality of classified event profiles for a plurality of events, respectively, each classified event profile comprising a classification and one or more first parameters, wherein the classification identifies whether the corresponding classified event profile is associated with fraud or legitimate; accessing, by one or more of the processors, a first cluster of classified event profiles each identified as being associated with fraud, and a second cluster of classified event profiles each identified as being legitimate; determining, by one or more of the processors, a plurality of first sub-clusters of classified event profiles from the first cluster of classified event profiles, and a plurality of second sub-clusters of classified event profiles from the second cluster of classified event profiles, wherein each sub-cluster comprises a plurality of classified event profiles comprising a first parameter that matches a specified parameter; and conditioning, by one or more of the processors, a plurality of fraud-detection algorithms, each fraud-detection algorithm corresponding to a particular specified parameter, and each fraud-detection algorithm being conditioned using a first sub-cluster of classified event profiles and a second sub-cluster of classified event profiles that each comprises classified event profiles comprising a first parameter that matches the particular specified parameter of the fraud-detection algorithm. |
