Statistical fraud detection: A review

Statistical Science

Volumn 17, Issue 3, 2002, Pages 235-255

  Bolton, Richard J ^b   Hand, David J ^a  

^a IMPERIAL COLLEGE LONDON   (United Kingdom)

^b NONE

Author keywords

Computer intrusion; Credit cards; E commerce; Fraud detection; Fraud prevention; Machine learning; Money laundering; Statistics; Telecommunications

Indexed keywords

EID: 0042421807     PISSN: 08834237     EISSN: None     Source Type: Journal    
DOI: 10.1214/ss/1042727940     Document Type: Review

References (98)

1. ALESKEROV, E., FREISLEBEN, B. and RAO, B. (1997). CARDWATCH: A neural network based database mining system for credit card fraud detection. In Computational Intelligence for Financial Engineering. Proceedings of the IEEE/IAFE 220-226. IEEE, Piscataway, NJ.
2. ALLEN, T. (2000). A day in the life of a Medicaid fraud statistician. Stats 29 20-22.
3. ANDERSON, D., FRIVOLD, T. and VALDES, A. (1995). Next-generation intrusion detection expert system (NIDES): A summary. Technical Report SRI-CSL-95-07, Computer Science Laboratory, SRI International, Menlo Park, CA.
4. ANDREWS, P. P. and PETERSON, M. B., eds. (1990). Criminal Intelligence Analysis. Palmer Enterprises, Loomis, CA.
5. ARTÍS, M., AYUSO, M. and GUILLÉN, M. (1999). Modelling different types of automobile insurance fraud behaviour in the Spanish market. Insurance Mathematics and Economics 24 67-81.
6. BARAO, M. I. and TAWN, J. A. (1999) Extremal analysis of short series with outliers: Sea-levels and athletics records. Appl. Statist. 48 469-487.
7. BLUNT, G. and HAND, D. J. (2000). The UK credit card market. Technical report, Dept. Mathematics, Imperial College, London.
8. BOLTON, R. J. and HAND, D. J. (2001). Unsupervised profiling methods for fraud detection. In Conference on Credit Scoring and Credit Control 7, Edinburgh, UK, 5-7 Sept.
9. BRAUSE, R., LANGSDORF, T. and HEPP, M. (1999). Neural data mining for credit card fraud detection. In Proceedings of the 11th IEEE International Conference on Tools with Artificial Intelligence 103-106. IEEE Computer Society Press, Silver Spring, MD.
10. BREIMAN, L., FRIEDMAN, J. H., OLSHEN, R. A. and STONE, C. J. (1984). Classification and Regression Trees. Wadsworth, Belmont, CA.
11. BROCKETT, P. L., XIA, X. and DERRIG, R. A. (1998). Using Kohonen's self-organising feature map to uncover automobile bodily injury claims fraud. The Journal of Risk and Insurance 65 245-274.
12. BURGE, P. and SHAWE-TAYLOR, J. (1997). Detecting cellular fraud using adaptive prototypes. In AAAI Workshop on AI Approaches to Fraud Detection and Risk Management 9-13. AAAI Press, Menlo Park, CA.
13. BUYSE, M., GEORGE, S. L., EVANS, S., GELLER, N. L., RANSTAM, J., SCHERRER, B., LESAFFRE, E., MURRAY, G., EDLER, L., HUTTON, J., COLTON, T., LACHENBRUCH, P. and VERMA, B. L. (1999). The role of biostatistics in the prevention, detection and treatment of fraud in clinical trials. Statistics in Medicine 18 3435-3451.
14. CAHILL, M. H., LAMBERT, D., PINHEIRO, J. C. and SUN, D. X. (2002). Detecting fraud in the real world. In Handbook of Massive Datasets (J. Abello, P. M. Pardalos and M. G. C. Resende, eds.). Kluwer, Dordrecht.
15. CHAN, P. K., FAN, W., PRODROMIDIS. A. L. and STOLFO, S. J. (1999). Distributed data mining in credit card fraud detection. IEEE Intelligent Systems 14(6) 67-74.
16. CHAN, P. and STOLFO, S. (1998). Toward scalable learning with non-uniform class and cost distributions: A case study in credit card fraud detection. In Proceedings of the Fourth International Conference on Knowledge Discovery and Data Mining 164-168. AAAI Press, Menlo Park, CA.
17. CHARTIER, B. and SPILLANE, T. (2000). Money laundering detection with a neural network. In Business Applications of Neural Networks (P. J. G. Lisboa, A. Vellido and B. Edisbury, eds.) 159-172. World Scientific, Singapore.
18. CHHIKARA, R. S. and MCKEON, J. (1984). Linear discriminant analysis with misallocation in training samples. J. Amer. Statist. Assoc. 79 899-906.
19. CLARK, P. and NIBLETT, T. (1989). The CN2 induction algorithm. Machine Learning 3 261-285.
20. COHEN, W. (1995). Fast effective rule induction. In Proceedings of the 12th International Conference on Machine Learning 115-123. Morgan Kaufmann, Palo Alto, CA.
21. CORTES, C., FISHER, K., PREGIBON, D. and ROGERS, A. (2000). Hancock: A language for extracting signatures from data streams. In Proceedings of the Sixth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining 9-17. ACM Press, New York.
22. CORTES, C. and PREGIBON, D. (1998). Giga-mining. In Proceedings of the Fourth International Conference on Knowledge Discovery and Data Mining 174-178. AAAI Press, Menlo Park, CA.
23. CORTES, C, PREGIBON, D. and VOLINSKY, C. (2001). Communities of interest. Lecture Notes in Comput. Sci. 2189 105-114.
24. Cox, K. C., EICK, S. G. and WILLS, G. J. (1997). Visual data mining: Recognizing telephone calling fraud. Data Mining and Knowledge Discovery 1 225-231.
25. CSIDS (1999). Cisco secure intrusion detection system technical overview. Available at http://www.wheelgroup.com/ warp/public/cc/cisco/mkt/security/nranger/tech/ntran_tc.htm.
26. DENNING, D. E. (1997). Cyberspace attacks and countermeasures. In Internet Besieged (D. E. Denning and P. J. Denning, eds.) 29-55. ACM Press, New York.
27. DORRONSORO, J. R., GINEL, F., SANCHEZ, C. and CRUZ, C. S. (1997). Neural fraud detection in credit card operations. IEEE Transactions on Neural Networks 8 827-834.
28. FANNING, K., COGGER, K. O. and SRIVASTAVA, R. (1995). Detection of management fraud: A neural network approach. International Journal of Intelligent Systems in Accounting, Finance and Management 4 113-126.
29. FAWCETT, T. and PROVOST, F. (1997a). Adaptive fraud detection. Data Mining and Knowledge Discovery 1 291-316.
30. FAWCETT, T. and PROVOST, F. (1997b). Combining data mining and machine learning for effective fraud detection. In AAAI Workshop on AI Approaches to Fraud Detection and Risk Management 14-19. AAAI Press, Menlo Park, CA.
31. FAWCETT, T. and PROVOST, F. (1999). Activity monitoring: Noticing interesting changes in behavior. In Proceedings of the Fifth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining 53-62. ACM Press, New York.
32. FORREST, S., HOFMEYR, S., SOMAYAJI, A. and LONGSTAFF. T. (1996). A sense of self for UNIX processes. In Proceedings of the 1996 IEEE Symposium on Security and Privacy 120-128. IEEE Computer Society Press, Silver Spring, MD.
33. GHOSH, S. and REILLY, D. L. (1994). Credit card fraud detection with a neural network. In Proceedings of the 27th Hawaii International Conference on System Sciences (J. F. Nunamaker and R. H. Sprague, eds.) 3 621-630. IEEE Computer Society Press, Los Alamitos, CA.
34. GLASGOW, B. (1997). Risk and fraud in the insurance industry. In AAAI Workshop on AI Approaches to Fraud Detection and Risk Management 20-21. AAAI Press, Menlo Park, CA.
35. GOLDBERG, H. and SENATOR, T. E. (1995). Restructuring data-bases for knowledge discovery by consolidation and link formation. In Proceedings of the First International Conference on Knowledge Discovery and Data Mining 136-141. AAAI Press, Menlo Park, CA.
36. GOLDBERG, H. and SENATOR, T. E. (1997). Break detection systems. In AAAI Workshop on AI Approaches to Fraud Detection and Risk Management 22-28. AAAI Press, Menlo Park, CA.
37. GOLDBERG, H. and SENATOR, T. E. (1998). The FinCEN AI system: Finding financial crimes in a large database of cash transactions. In Agent Technology: Foundations, Applications, and Markets (N. Jennings and M. Wooldridge, eds.) 283-302. Springer, Berlin.
38. GREEN, B. P. and CHOI, J. H. (1997). Assessing the risk of management fraud through neural network technology. Auditing 16 14-28.
39. HAND, D. J. (1981). Discrimination and Classification. Wiley, Chichester.
40. HAND, D. J. (1997). Construction and Assessment of Classification Rules. Wiley, Chichester.
41. HAND, D. J. and BLUNT, G. (2001). Prospecting for gems in credit card data. IMA Journal of Management Mathematics 12 173-200.
42. HAND, D. J., BLUNT, G., KELLY, M. G. and ADAMS, N. M. (2000). Data mining for fun and profit (with discussion). Statist. Sci. 15 111-131.
43. HAND, D. J. and HENLEY, W. E. (1997). Statistical classification methods in consumer credit scoring: A review. J. Roy. Statist. Soc. Ser. A 160 523-541.
44. HASSIBI, K. (2000). Detecting payment card fraud with neural networks. In Business Applications of Neural Networks (P. J. G. Lisboa, A. Vellido and B. Edisbury, eds.). World Scientific, Singapore.
45. HE, H., GRACO, W. and YAO, X. (1999). Application of genetic algorithm and k-nearest neighbour method in medical fraud detection. Lecture Notes in Comput. Sci. 1585 74-81. Springer, Berlin.
46. HE, H. X., WANG, J. C., GRACO, W. and HAWKINS, S. (1997). Application of neural networks to detection of medical fraud. Expert Systems with Applications 13 329-336.
47. HILL, T. P. (1995). A statistical derivation of the significant-digit law. Statist. Sci. 10 354-363.
48. HYNNINEN, J. (2000). Experiences in mobile phone fraud. Seminar on Network Security. Report Tik-110.501, Helsinki Univ. Technology.
49. JENKINS, P. (2000). Getting smart with fraudsters. Financial Times, September 23.
50. JENSEN, D. (1997). Prospective assessment of AI technologies for fraud detection: a case study. In AAAI Workshop on AI Approaches to Fraud Detection and Risk Management 34-38. AAAI Press, Menlo Park, CA.
51. JU, W.-H. and VARDI, Y. (2001). A hybrid high-order Markov chain model for computer intrusion detection. J. Comput. Graph. Statist. 10 277-295.
52. KIRKLAND, J. D., SENATOR, T. E., HAYDEN, J. J., DYBALA, T., GOLDBERG, H. G. and SHYR, P. (1998). The NASD regulation advanced detection system (ADS). In Proceedings of the 15th National Conference on Artificial Intelligence (AAAI-98) and of the 10th Conference on Innovative Applications of Artificial Intelligence (IAAI-98) 1055-1062. AAAI Press, Menlo Park, CA.
53. KOSORESOW, A. P. and HOFMEYR, S. A. (1997). Intrusion detection via system call traces. IEEE Software 14 35-12.
54. KUMAR, S. and SPAFFORD, E. (1994). A pattern matching model for misuse intrusion detection. In Proceedings of the 17th National Computer Security Conference 11-21.
55. LACHENBRUCH, P. A. (1966). Discriminant analysis when the initial samples are misclassified. Technometrics 8 657-662.
56. LACHENBRUCH, P. A. (1974). Discriminant analysis when the initial samples are misclassified. II: Non-random misclassification models. Technometrics 16 419-424.
57. LANE, T. and BRODLEY, C. E. (1998). Temporal sequence learning and data reduction for anomaly detection. In Proceedings of the 5th ACM Conference on Computer and Communications Security (CCS-98) 150-158. ACM Press, New York.
58. LEE, W. and STOLFO, S. (1998). Data mining approaches for intrusion detection. In Proceedings of the 7th USENIX Security Symposium, San Antonio, TX 79-93. USENIX Association, Berkeley, CA.
59. LEONARD, K. J. (1993). Detecting credit card fraud using expert systems. Computers and Industrial Engineering 25 103-106.
60. LIPPMANN, R., FRIED, D., GRAF, I., HAINES, J., KENDALL, K., MCCLUNG, D., WEBER, D., WEBSTER, S., WYSCHOGROD, D., CUNNINGHAM, R. and ZISSMAN, M. (2000). Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion-detection evaluation. Unpublished manuscript, MIT Lincoln Laboratory.
61. MAJOR, J. A. and RIEDINGER, D. R. (1992). EFD: A hybrid knowledge/statistical-based system for the detection of fraud. International Journal of Intelligent Systems 7 687-703.
62. MARCHETTE, D. J. (2001). Computer Intrusion Detection and Network Monitoring: A Statistical Viewpoint. Springer, New York.
63. MCCARTHY, J. (2000). Phenomenal data mining. Comm. ACM 43 75-79.
64. MCLACHLAN, G. J. (1992). Discriminant Analysis and Statistical Pattern Recognition. Wiley, New York.
65. MOBILE EUROPE (2000). New IP world, new dangers. Mobile Europe, March.
66. MOREAU, Y., PRENEEL, B., BURGE, P., SHAWE-TAYLOR, J., STOERMANN, C. and COOKE, C. (1996). Novel techniques for fraud detection in mobile communications. In ACTS Mobile Summit, Grenada.
67. MOREAU, Y., VERRELST, H. and VANDEWALLE, J. (1997). Detection of mobile phone fraud using supervised neural networks: A first prototype. In Proceedings of 7th International Conference on Artificial Neural Networks (ICANN'97) 1065-1070. Springer, Berlin.
68. MURAD, U. and PINKAS, G. (1999). Unsupervised profiling for identifying superimposed fraud. Principles of Data Mining and Knowledge Discovery. Lecture Notes in Artificial Intelligence 1704 251-261. Springer, Berlin.
69. NEURAL TECHNOLOGIES (2000). Reducing telecoms fraud and churn. Report. Neural Technologies, Ltd., Petersfield, U.K.
70. NIGRINI, M. J. (1999). I've got your number. Journal of Accountancy May 79-83.
71. NIGRINI, M. J. and MITTERMAIER, L. J. (1997). The use of Benford's law as an aid in analytical procedures. Auditing: A Journal of Practice and Theory 16 52-67.
72. NORTEL (2000). Nortel networks fraud solutions. Fraud Primer, Issue 2.0. Nortel Networks Corporation.
73. PAK, S. J. and ZDANOWICZ, J. S. (1994). A statistical analysis of the U.S. Merchandise Trade Database and its uses in transfer pricing compliance and enforcement. Tax Management, May 11.
74. PATIENT, S. (2000). Reducing online credit card fraud. Web Developer's Journal. Available at http://www. webdevelopersjournal.com/articles/card_fraud.html
75. PRESS, S. J. and TANUR, J. M. (2001). The Subjectivity of Scientists and the Bavesian Approach. Wiley, New York.
76. PROVOST, F. and FAWCETT, T. (2001). Robust classification for imprecise environments. Machine Learning 42 203-210.
77. QU, D., VETTER, B. M., WANG, F., NARAYAN, R., WU, S. F., HOU, Y. F., GONG, F. and SARGOR, C. (1998). Statistical anomaly detection for link-state routing protocols. In Proceedings of the Sixth International Conference on Network Protocols 62-70. IEEE Computer Society Press, Los Alamitos, CA.
78. QUINLAN, J. R. (1990). Learning logical definitions from relations. Machine Learning 5 239-266.
79. QUINLAN, J. R. (1993). C4.5: Programs for Machine Learning. Morgan Kaufmann, San Mateo, CA.
80. RIPLEY, B. D. (1996). Pattern Recognition and Neural Networks. Cambridge Univ. Press.
81. ROBINSON, M. E. and TAWN, J. A. (1995). Statistics for exceptional athletics records. Appl. Statist. 44 499-511.
82. ROSSET, S., MURAD, U., NEUMANN, E., IDAN, Y. and PINKAS, G. (1999). Discovery of fraud rules for telecommunications - challenges and solutions. In Proceedings of the Fifth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining 409-413. ACM Press, New York.
83. RYAN, J., LIN, M. and MIIKKULAINEN, R. (1997). Intrusion detection with neural networks. In AAAI Workshop on AI Approaches to Fraud Detection and Risk Management 72-79. AAAI Press, Menlo Park, CA.
84. SCHONLAU, M., DUMOUCHEL, W., JU, W.-H., KARR, A. F., THEUS, M. and VARDI, Y. (2001). Computer intrusion: Detecting masquerades. Statist. Sci. 16 58-74.
85. SENATOR, T. E. (2000). Ongoing management and application of discovered knowledge in a large regulatory organization: A case study of the use and impact of NASD regulation's advanced detection system (ADS). In Proceedings of the Sixth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining 44-53. ACM Press, New York.
86. SENATOR, T. E., GOLDBERG, H. G., WOOTON, J., COTTINI, M. A., UMAR KHAN, A. F., KLINGER, C. D., LLAMAS, W. M., MARRONE, M. P. and WONG, R. W. H. (1995). The financial crimes enforcement network AI system (FAIS) -Identifying potential money laundering from reports of large cash transactions. AI Magazine 16 21-39.
87. SHAWE-TAYLOR, J., HOWKER, K., COSSET, P., HYLAND, M., VERRELST, H., MOREAU, Y., STOERMANN, C. and BURGE, P. (2000). Novel techniques for profiling and fraud detection in mobile telecommunications. In Business Applications of Neural Networks (P. J. G. Lisboa, A. Vellido and B.Edisbury, eds.) 113-139. World Scientific, Singapore.
88. SHIEH, S.-P. W. and GLIGOR, V. D. (1991). A pattern-oriented intrusion-detection model and its applications. In Proceedings of the 1991 IEEE Computer Society Symposium on Research in Security and Privacy 327-342. IEEE Computer Society Press, Silver Spring, MD.
89. SHIEH, S.-P. W. and GLIGOR, V. D. (1997). On a pattern-oriented model for intrusion detection. IEEE Transactions on Knowledge and Data Engineering 9 661-667.
90. SMITH, R. L. (1997). Comment on "Statistics for exceptional athletics records," by M. E. Robinson and J. A. Tawn. Appl. Statist. 46 123-128.
91. STOLFO, S. J., FAN, D. W., LEE, W., PRODROMIDIS, A. L. and CHAN, P. K. (1997a). Credit card fraud detection using metalearning: Issues and initial results. In AAAI Workshop on AI Approaches to Fraud Detection and Risk Management 83-90. AAAI Press, Menlo Park, CA.
92. STOLFO, S., FAN, W., LEE, W., PRODROMIDIS, A. L. and CHAN, P. (1999). Cost-based modeling for fraud and intrusion detection: Results from the JAM Project. In Proceedings of the DARPA Information Survivability Conference and Exposition 2 130-144. IEEE Computer Press, New York.
93. STOLFO, S. J., PRODROMIDIS, A. L., TSELEPIS, S., LEE, W., FAN, D. W. and CHAN, P. K. (1997b). JAM: Java agents for meta-learning over distributed databases. In AAAI Workshop on AI Approaches to Fraud Detection and Risk Management 91-98. AAAI Press, Menlo Park, CA.
94. TANIGUCHI, M., HAFT, M., HOLLMÉN, J. and TRESP, V. (1998). Fraud detection in communication networks using neural and probabilistic methods. In Proceedings of the 1998 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP'98) 2 1241-1244. IEEE Computer Society Press, Silver Spring, MD.
95. U.S. CONGRESS (1995). Information technologies for the control of money laundering. Office of Technology Assessment, Report OTA-ITC-630, U.S. Government Printing Office, Washington, DC.
96. WASSERMAN, S. and FAUST, K. (1994). Social Network Analysis: Methods and Applications. Cambridge Univ. Press.
97. WEBB, A. R. (1999). Statistical Pattern Recognition. Arnold, London.
98. WHEELER, R. and AITKEN, S. (2000). Multiple algorithms for fraud detection. Knowledge-Based Systems 13(2/3) 93-99.