The design of FFML: A rule-based policy modelling language for proactive fraud management in financial data streams

Expert Systems with Applications

Volumn 39, Issue 11, 2012, Pages 9966-9985

  Edge, Michael E ^a   Falcone Sampaio, Pedro R ^a  

^a UNIVERSITY OF MANCHESTER   (United Kingdom)

Author keywords

Domain specific policy based languages; Financial information systems; Fraud detection; Information security; Rule based expert systems

Indexed keywords

ACTIVE MONITORING; AD HOC SECURITY; ASSISTIVE TOOL; BOTTOM LINES; BRAND IMAGE; CONCEPTUAL LEVELS; CUSTOMER SERVICES; DATA STREAM; DOMAIN SPECIFIC LANGUAGES; EXECUTABLE CODES; FINANCIAL DATA; FINANCIAL INFORMATION SYSTEMS; FINANCIAL INSTITUTION; FINANCIAL LOSS; FINANCIAL SERVICE; FRAUD DETECTION; FRAUD DETECTION SYSTEM; FRAUDSTERS; INFORMATION MODELS; MANAGEMENT POLICY; MODELLING LANGUAGE; MULTI-CHANNEL; NEW HIGH; POLICY MAPPINGS; RULE BASED; RULE-BASED EXPERT SYSTEM; TRANSACTION EXECUTION;

APPLICATION PROGRAMMING INTERFACES (API); COMPUTER CRIME; COMPUTER SYSTEMS PROGRAMMING; CRIME; DATA COMMUNICATION SYSTEMS; EXPERT SYSTEMS; FINANCE; INFORMATION THEORY; LOSSES; SECURITY OF DATA;

INFORMATION MANAGEMENT;

EID: 84859419845     PISSN: 09574174     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.eswa.2012.01.143     Document Type: Article

References (62)

1. D.J. Abadi, D. Carney, U. Cetintemel, M. Cherniack, C. Convey, and S. Lee Aurora: A new model and architecture for data stream management The VLDB Journal 12 2 2003 120 139
2. Abadi, D., Ahmad, Y., Balazinska, M., Cetintemel, U., Cherniack, M., Hwang, J., et al. (2005). The design of the borealis stream processing engine. In 2nd Biennial conference on innovative data systems research (CIDR'05) (pp. 277-289).
3. Aleskerov, E., Freisleben, B., Rao, B. (1997). CARDWATCH: A neural network based database mining system for credit card fraud detection. In Proceedings of the IEEE/IAFE 1997 computational intelligence for financial engineering (CIFEr) (pp. 220-226).
4. R. Anderson Security engineering: A guide to building dependable distributed systems 2nd ed. 2008 Wiley
5. R.J. Anthony Policy-based autonomic computing with integral support for self-stabilisation International Journal of Autonomic Computing 1 1 2009 1 33
6. A. Apvrille, and M. Pourzandi XML distributed security policy for clusters Computers & Security 23 8 2004 649 658
7. A. Arasu, B. Babcock, S. Babu, M. Datar, K. Ito, and I. Nishizawa STREAM: The stanford stream data manager Proceedings of the 2003 ACM SIGMOD international conference on management of data 2003 ACM Press San Diego, California (pp. 665-665)
8. J. Bae, and H. Bae Automatic control of workflow processes using ECA rules IEEE Transactions on Knowledge and Data Engineering 16 8 2004 1010 1023
9. Bertino, E., Bhargav-Spantzel, A., & Squicciarrini, A. (2006). Policy languages for digital identity management in federation systems. In Proceedings of 7th IEEE international workshop on policies for distributed systems and networks (pp. 54-66).
10. Bicakci, K., & Baykal, N. (2003). One-time passwords: Security analysis using BAN logic and integrating with smartcard authentication. In Computer and information sciences - ISCIS 2003 (Vol. 2869, pp. 794-801).
11. A. Boukerche, and M.S.M.A. Notare Neural fraud detection in mobile phone operations Lecture Notes in Computer Science 1800 2000 636 644
12. R. Brause, T. Langsdorf, and M. Hepp Neural data mining for credit card fraud detection ICTAI'99: Proceedings of the 11th IEEE international conference on tools with artificial intelligence 1999 IEEE Computer Society 103 106
13. P. Burge, J. Shawe-Taylor, C. Cooke, Y. Moreau, B. Preneel, and C. Stoermann Fraud detection and management in mobile telecommunications networks Proceedings of the European conference on security and detection, ECOS 97 1997 IEEE London, UK 91 96
14. Cahill, M., Lambert, D., Pinheiro, J., & Sun, D. (2000). Detecting fraud in the real world. Technical report. Bell Labs, Lucent Technologies.
15. Chandrasekaran, S., Cooper, O., Deshpande, A., Franklin, M., Hellerstein, J., Hong, W., et al. (2003). TelegraphCQ: Continuous dataflow processing for an uncertain world. In First biennial conference on innovative data systems research, Asilomar, CA, USA, CIDR 2003.
16. C. Cortes, and D. Pregibon Signature-based methods for data streams Data Mining and Knowledge Discovery 5 3 2001 167 182
17. N. Damianou, N. Dulay, E. Lupu, and M. Sloman The ponder policy specification language POLICY '01: Proceedings of the international workshop on policies for distributed systems and networks 2001 Springer-Verlag 18 38
18. V.A. Danciu, and B. Kempter From processes to policies - concepts for large scale policy generation Network operations and management symposium, 2004 (NOMS 2004) Vol. 1 2004 IEEE/IFIP 17 30
19. Dekhil, M., Machiraju, V., Wurster, K., & Griss, M. (1999). Generalized policy model for application and service management. In Policy workshop, Bristol, UK.
20. A.v. Deursen, P. Klint, and J. Visser Domain-specific languages: An annotated bibliography ACM SIGPLAN Notices 35 6 2000 26 36
21. D. Diaz, B. Theodoulidis, and P. Sampaio Analysis of stock market manipulations using knowledge discovery techniques applied to intraday trade prices Expert Systems With Applications 38 10 2011 12757 12771
22. Drimer, S., Murdoch, S. J., & Anderson, R. (2008). Thinking inside the box: System-level failures of tamper proofing. In IEEE symposium on security and privacy, 2008 (SP 2008) (pp. 281-295).
23. S. Drimer, S. Murdoch, and R. Anderson Optimised to fail: Card readers for online banking Financial cryptography and data security 2009 Rockley Barbados (pp. 184-200)
24. Edge, M. (2010). A policy driven approach to proactive fraud management in financial data streams. Ph.D. Thesis. University of Manchester.
25. Edge, M. E., Sampaio, P. R. F., Philpott, O., & Choudhary, M. (2009). Specifying and compiling high level financial fraud policies into StreamSQL. In Proceedings of the 11th international conference on enterprise information systems (pp. 194-199).
26. M.E. Edge, and P.R.F. Sampaio A survey of signature based methods for financial fraud detection Computers & Security 28 6 2009 381 394
27. Entrust. (2011). Entrust TransactionGuard. Retrieved 08.02.11.
28. Experian. (2011). Experian Ltd. . Retrieved 16.02.11.
29. Fan, W., Huang, Y.-A., Wang, H., & Yu, P. (2004). Active mining of data streams. In Proceedings of SIAM international conference on data mining 2004, Hashville, TN (pp. 457-461).
30. T. Fawcett, and F. Provost Adaptive fraud detection Data Mining and Knowledge Discovery 1997 291 316
31. Ferreira, P., Alves, R., Belo, O., & Cortesao, L. (2006). Establishing fraud detection patterns based on signatures. In Industrial conference on data mining, Leipzig, Germany (pp. 526-538).
32. FICO. (2011). Fair Isaac Corporation. Retrieved 16.02.11.
33. Fortent. (2011). Fortent. Retrieved 18.02.11.
34. S. Ghosh, and D.L. Reilly Credit card fraud detection with a neural-network Proceedings of the twentyseventh Hawaii international conference on system science Vol. 3 1994 IEEE Computer Society Press 621 630
35. J. Gray, and A. Reuter Transaction processing: Concepts and techniques 1992 Morgan Kaufmann ISBN: 10:1558601902
36. Hilas, C. S., & Sahalos, J. N. (2006). Testing the fraud detection ability of different user profiles by means of FF-NN classifiers. In 16th International conference on artificial neural networks (ICANN 2006), Athens, LNCS (Vol. 2, pp. 872-883).
37. Kim, G., Kim, J., & Na, J. (2005). Design and implementation of policy decision point in policy-based network. In ICIS '05: Proceedings of the fourth annual ACIS international conference on computer and information science (pp. 534-538).
38. Kou, Y., Lu, C.-T., Sirwongwattana, S., & Huang, Y. (2004). Survey of fraud detection techniques. In 2004 IEEE international conference on networking, sensing and control, (Vol. 2, pp. 749-754).
39. Lobo, J., Bhatia, R., & Naqvi, S. (1999). A policy description language. In AAAI'99/IAAI'99: Proceedings of the sixteenth national conference on artificial intelligence and the eleventh innovative applications of artificial intelligence conference innovative applications of artificial intelligence, Orlando, Florida, United States (pp. 291-298).
40. D. Luckham The power of events: An introduction to complex event processing in distributed enterprise systems 2002 Addison Wesley
41. D. Luckham The RAPIDE pattern language The power of events: An introduction to complex event processing in distributed enterprise systems 2005 Addison Wesley pp. 145-174
42. T.F. Lunt A survey of intrusion detection techniques Computers and Security 12 4 1993 405 418
43. Maes, S., Tuyls, K., Vanschoenwinkel, B., & Manderick, B. (2002). Credit card fraud detection using bayesian and neural networks. In Proceedings of the first international NAISO congress on neuro fuzzy technologies, Havana, Cuba.
44. Massey, K. (2005). Combating eFraud-A next generation approach, Financial Insights White Paper.
45. NFA. (2011). National Fraud Authority Annual Fraud Indicator report published on January 2011. Retrieved 13.02.11.
46. Oxford. (2008). Concise Oxford english dictionary, 11th ed. Oxford: OUP.
47. N.W. Paton, and O. Diaz Active database systems ACM Computing Surveys 31 1 1999 63 103
48. C. Phua, V. Lee, K. Smith, and R. Gayler A comprehensive survey of data mining-based fraud detection research Artificial Intelligence Review 2005
49. C. Phua, V. Lee, K. Smith-Miles, and R. Gayler Adaptive communal detection in search of adversarial identity crime DDDM'07: Proceedings of the 2007 international workshop on domain driven data mining 2007 ACM San Jose, California 1 10
50. Ramshaw, L., Sahai, A., Saxe, J., & Singhal, S. (2006). Cauldron: A policy-based design tool. In Seventh IEEE international workshop on policies for distributed systems and networks (POLICY '06), London, Ontario, Canada (pp. 113-122).
51. RSA. (2011). RSA, The Security Division of EMC. Retrieved 16.02.11.
52. ruleCore. (2011). ruleCore. Retrieved 18.02.11.
53. SAS. (2011). SAS: The power to know. Retrieved 18.02.11.
54. SPSS/IBM. (2011). IBM SPSS Statistics 19. Retrieved 18.12.11.
55. M. Stonebraker, A. Jhingran, J. Goh, and S. Potamianos On Rules, procedures, caching and views in data base systems SIGMOD'90: Proceedings of the 1990 ACM SIGMOD international conference on management of data, Atlantic City, New Jersey, United States 1990 ACM Press 281 290
56. StreamBase. (2011). StreamBase. Retrieved 18.02.11.
57. StreamSQL. (2011). StreamSQL. Retrieved 18.02.11.
58. R.J. Sullivan The changing nature of US card payment fraud: Issues for industry and public policy Economic Review, Federal Reserve Bank of Kansas City Q II 2010 101 133
59. Sybase. (2011). Sybase. Retrieved 18.02.11.
60. S. Viaene, G. Dedene, and R. Derrig Auto claim fraud detection using Bayesian learning neural networks Expert Systems with Applications: An International Journal 29 3 2005 653 666
61. Widom, J. & Ceri, S. (1996). Active database systems: Triggers and rules for advanced database processing (The Morgan Kaufmann Series in Data Management Systems) Morgan Kaufmann.
62. K. Youn, and C. Hong A network management architecture using XML-based policy information base Information Networking 2662/2003 2003 876 885