摘要 |
Fraudulent use of a telephone is detected by matching information on individual calls to an alarm rule. A rule matching value is calculated dependent upon the closeness of match of the call record to the alarm rule. A threshold Tr is defined, and if the rule matching value exceeds the threshold, an alarm is generated. If the rule matching value is less than Tr, but is greater than a second threshold value, then the match is determined to be a near match. The matched and near matched records are validated with an indication of expected fraud, and Tr and the second threshold value are adjusted in dependence on the matched and near matched records.
|