基于密集子图的银行电信诈骗检测方法

doi:10.11772/j.issn.1001-9081.2018091861

计算机应用 ›› 2019, Vol. 39 ›› Issue (4): 1214-1219.DOI: 10.11772/j.issn.1001-9081.2018091861

• 应用前沿、交叉与综合 • 上一篇下一篇

基于密集子图的银行电信诈骗检测方法

刘枭, 王晓国

同济大学电子与信息工程学院, 上海 201800

收稿日期:2018-09-07 修回日期:2018-11-08 发布日期:2019-04-10 出版日期:2019-04-10
通讯作者: 刘枭
作者简介:刘枭(1989-),男,江苏苏州人,博士研究生,主要研究方向:数据挖掘、欺诈检测;王晓国(1966-),男,河南商丘人,教授,博士,主要研究方向:数据挖掘、企业信息化。

Dense subgraph based telecommunication fraud detection approach in bank

LIU Xiao, WANG Xiaoguo

College of Electronics and Information Engineering, Tongji University, Shanghai 201800, China

Received:2018-09-07 Revised:2018-11-08 Online:2019-04-10 Published:2019-04-10

摘要/Abstract

摘要： 目前银行对电信诈骗的标记数据积累少，人工标记数据的代价大，导致电信诈骗检测的有监督学习方法可使用的标记数据不足。针对这个问题，提出一种基于密集子图的无监督学习方法用于电信诈骗的检测。首先，通过在账户-资源（IP地址和MAC地址统称为资源）网络搜索可疑度较高的子图来识别欺诈账户；然后，设计了一种符合电信诈骗特性的子图可疑度量；最后，提出一种磁盘驻留、线性内存消耗且有理论保障的可疑子图搜索算法。在两组模拟数据集上，所提方法的F1-score分别达到0.921和0.861，高于CrossSpot、fBox和EvilCohort算法，与M-Zoom算法的0.899和0.898相近，但是所提方法的平均运行时间和内存消耗峰值均小于M-Zoom算法；在真实数据集上，所提方法的F1-score达到0.550，高于fBox和EvilCohort算法，与M-Zoom算法的0.529相近。实验结果表明，所提方法能较好地应用于现阶段的银行反电信诈骗业务，且非常适合于实际应用中的大规模数据集。

关键词: 电信诈骗, 无监督学习, 欺诈检测, 密集子图, 贪心算法

Abstract: Lack of labeled data accumulated for telecommunication fraud in the bank and high cost of manually labeling cause the insufficiency of labeled data that can be used in supervised learning methods for telecommunication fraud detection. To solve this problem, an unsupervised learning method based on dense subgraph was proposed to detect telecommunication fraud. Firstly, subgraphs with high anomaly degree in the network of accounts and resources (IP addresses and MAC addresses) were searched to identify fraud accounts. Then, a subgraph anomaly degree metric satisfying the features of telecommunication fraud was designed. Finally, a suspicious subgraph searching algorithm with resident disk, efficient memory and theory guarantee was proposed. On two synthetic datasets, the F1-scores of the proposed method are 0.921 and 0.861, which are higher than those of CrossSpot, fBox and EvilCohort algorithms while very close to those of M-Zoom algorithm (0.899 and 0.898), but the average running time and memory consumption peak of the proposed method are less than those of M-Zoom algorithm. On real-world dataset, F1-score of the proposed method is 0.550, which is higher than that of fBox and EvilCohort while very close to that of M-Zoom algorithm (0.529). Theoretical analysis and simulation results show that the proposed method can be applied to telecommunication fraud detection in the bank effectively, and is suitable for big datasets in practice.

Key words: telecommunication fraud, unsupervised learning, fraud detection, dense subgraph, greedy algorithm

中图分类号:

TP391.4

刘枭, 王晓国. 基于密集子图的银行电信诈骗检测方法[J]. 计算机应用, 2019, 39(4): 1214-1219.

LIU Xiao, WANG Xiaoguo. Dense subgraph based telecommunication fraud detection approach in bank[J]. Journal of Computer Applications, 2019, 39(4): 1214-1219.

参考文献

[1] JHA S, GUILLEN M, CHRISTOPHER W J. Employing transaction aggregation strategy to detect credit card fraud[J]. Expert Systems with Applications, 2012, 39(16):12650-12657.
[2] van VLASSELAER V, BRAVO C, CAELEN O, et al. APATE:a novel approach for automated credit card transaction fraud detection using network-based extensions[J]. Decision Support Systems, 2015, 75:38-48.
[3] BAHNSEN A C, AOUADA D, STOJANOVIC A, et al. Detecting credit card fraud using periodic features[C]//ICMLA 2015:Proceedings of the 2015 IEEE 14th International Conference on Machine Learning and Applications. Piscataway, NJ:IEEE, 2015:208-213.
[4] SAVGE D, WANG Q M, CHOU P L, et al. Detection of money laundering groups using supervised learning in networks[EB/OL].[2018-05-10]. https://arxiv.org/pdf/1608.00708.
[5] KHAC N A L, MARKOS S, KECHADI M. A data mining-based solution for detecting suspicious money laundering cases in an investment bank[C]//DBKDA 2010:Proceedings of the 2010 Second International Conference on Advances in Databases, Knowledge, and Data Applications. Piscataway, NJ:IEEE, 2010:235-240.
[6] NEDA H, ALI H, MEHDI S. An intelligent anti-money laundering method for detecting risky users in the banking systems[J]. International Journal of Computer Applications, 2014, 97(22):35-39.
[7] MICHALAK K, KORCZAK J. Graph mining approach to suspicious transaction detection[C]//FedCSIS 2011:Proceedings of the 2011 Federated Conference on Computer Science and Information Systems. Piscataway, NJ:IEEE, 2011:69-75.
[8] 喻炜, 王建东. 基于交易网络特征向量中心度量的可疑洗钱识别系统[J]. 计算机应用, 2009, 29(9):2581-2585. (YU W, WANG J D. Suspicious money laundering detection system based on eigenvector centrality measure of transaction network[J]. Journal of Computer Applications, 2009, 29(9):2581-2585.)
[9] SOLTANI R, NGUYEN U, YANG Y, et al. A new algorithm for money laundering detection based on structural similarity[C]//UEMCON 2016:Proceedings of the 2016 IEEE 7th Annual Ubiquitous Computing, Electronics and Mobile Communication Conference. Piscataway, NJ:IEEE, 2016:1-7.
[10] HUANG J, SUN H, HAN J, et al. SHRINK:a structural clustering algorithm for detecting hierarchical communities in networks[C]//Proceedings of the 19th ACM International Conference on Information and Knowledge Management. New York:ACM, 2010:219-228.
[11] GIANLUCA S, PIERRE M, GREGOIRE J, et al. EVILCOHORT:detecting communities of malicious accounts on online services[C]//SEC 2015:Proceedings of the 24th USENIX Conference on Security Symposium. Berkeley:USENIX Association, 2015:563-578.
[12] BLONDEL V D, GUILAUME J L, LAMBIOTTE R, et al. Fast unfolding of communities in large networks[J]. Journal of Statistical Mechanics:Theory and Experiment, 2008, 2008(10):P10008.
[13] PRAKAS B A, SRIDHARAN A, SESHADRI M, et al. EigenSpokes:surprising patterns and scalable community chipping in large graphs[C]//PAKDD 2010:Proceedings of the 2010 Pacific-Asia Conference on Knowledge Discovery and Data Mining. Berlin:Springer, 2010:435-448.
[14] SHAH N, BEUTEL A, GALLAGHER B, et al. Spotting suspicious link behavior with fBox:an adversarial perspective[C]//ICDM:Proceedings of the 2014 IEEE International Conference on Data Mining. Piscataway, NJ:IEEE, 2014:959-964.
[15] JIANG M, BEUTEL A, CUI P, et al. Spotting suspicious behaviors in multimodal data:a general metric and algorithms[J]. IEEE Transactions on Knowledge and Data Engineering, 2016, 28(8):2187-2200.
[16] CHARIKAR M. Greedy approximation algorithms for finding dense components in a graph[C]//APPROX 2000:Proceedings of the Third International Workshop on Approximation Algorithms for Combinatorial Optimization. Berlin:Springer, 2000:84-95.
[17] SHIN K, HOOI B, FALOUTSOS C. M-Zoom:fast dense-block detection in tensors with quality guarantees[C]//Proceedings of the 2016 Joint European Conference on Machine Learning and Knowledge Discovery in Databases. Berlin:Springer, 2016:264-280.
[18] SHIN K, HOOI B, FALOUTSOS C. Fast, accurate and flexible algorithms for dense subtensor mining[J]. ACM Transactions on Knowledge Discovery from Data, 2018, 12(3):1-30.
[19] JIN R, XIANG Y, RUAN N, et al. 3-HOP:a high-compression indexing scheme for reachability query[C]//SIGMOD 2009:Proceedings of the 2009 ACM SIGMOD International Conference on Management of data. New York:ACM, 2009:813-826.
[20] BATAGELJ V, BRANDES U. Efficient generation of large random networks[J]. Physical Review E:Covering Statistical, Nonlinear, Biological, and Soft Matter Physics, 2005, 71(3):036113.

基于密集子图的银行电信诈骗检测方法

Dense subgraph based telecommunication fraud detection approach in bank

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	刘睿珩, 叶霞, 岳增营. 面向自然语言处理任务的预训练模型综述[J]. 《计算机应用》唯一官方网站, 2021, 41(5): 1236-1246.
[2]	郭一村, 陈华辉. 在线哈希算法研究综述[J]. 计算机应用, 2021, 41(4): 1106-1112.
[3]	张舒瑶, 李勇华, 范家佳. 基于博弈论的散货港口堆场堆位分配算法[J]. 计算机应用, 2021, 41(3): 867-874.
[4]	汪志远, 降爱莲, 奥斯曼·穆罕默德. 基于正则互表示的无监督特征选择方法[J]. 计算机应用, 2020, 40(7): 1896-1900.
[5]	蔡豪, 袁正道. 云数据中心基于贪心模式的虚拟机选择算法[J]. 计算机应用, 2020, 40(6): 1707-1713.
[6]	易东义, 邓根强, 董超雄, 祝苗苗, 吕周平, 朱岁松. 基于图卷积神经网络的医保欺诈检测算法[J]. 计算机应用, 2020, 40(5): 1272-1277.
[7]	杨艳, 刘生建, 周永权. 贪心二进制狮群优化算法求解多维背包问题[J]. 计算机应用, 2020, 40(5): 1291-1294.
[8]	宋艳, 殷俊. 基于共享近邻的多视角谱聚类算法[J]. 计算机应用, 2020, 40(11): 3211-3216.
[9]	张宪立, 唐建新, 曹来成. 基于反向PageRank的影响力最大化算法[J]. 计算机应用, 2020, 40(1): 96-102.
[10]	袁培燕, 蔡云云. 移动边缘计算中一种贪心策略的内容卸载方案[J]. 计算机应用, 2019, 39(9): 2664-2668.
[11]	杨东海, 林敏敏, 张文杰, 杨敬民. 无监督混阶栈式稀疏自编码器的图像分类学习[J]. 计算机应用, 2019, 39(12): 3420-3425.
[12]	刘开南. 云数据中心基于贪心算法的虚拟机迁移策略[J]. 计算机应用, 2019, 39(11): 3333-3338.
[13]	唐海波, 林煜明, 李优, 蔡国永. 基于模拟退火与贪心策略的平衡聚类算法[J]. 计算机应用, 2018, 38(11): 3132-3138.
[14]	龚永红, 郑威, 吴林, 谭马龙, 余浩. 基于自步学习的无监督属性选择算法[J]. 计算机应用, 2018, 38(10): 2856-2861.
[15]	郭后钱, 王微微, 尚颖, 赵瑞莲. 基于动态集合进化算法的弱变异测试用例集生成[J]. 计算机应用, 2017, 37(9): 2659-2664.