Behavioral Pattern Detection using Compact and Fast Methods

Nuno Homem

Nuno Homem Nuno Homem received his degree in Electrotechnical and Computer Engineering, by the Institute Superior Técnico of Lisbon, concluded in July 29, 1992. In 1993 he started working in the IT area as a consultant and manager for several companies, namely Xerox, Solsuni and HP. In 1998 he joined Optimus and participated in the launch of the third GSM operator in Portugal, as the responsible for Commercial Information Systems within the IT Department. In 2000 he co-founded WeDo Consulting and assumed the role of Partner and CTO , being responsible for all the software development in areas such as Revenue Assurance, Fraud; Commissions, Collections, Roaming Management and Billing related systems for the telecommunications industry. In 2001 he assumed the reponsability of CEO in Mainroad, a leading player in Portugal for services and solutions of IT Managed Services, Security, Business Continuity, IT Service Management e ITIL consulting supported on its redundant Data Centers.

Addresses: www mail

Date

• 15:00, Friday, October 28^th, 2011
• Room 20

Speaker

• Nuno Homem, Mainroad

Abstract

This work proposes algorithms and methods for individual behavior detection within very large populations. One will consider domains where individual behavior presents some stable characteristics over time, and where the individual actions can be observed through events in a data stream. Event patterns will be characterized and used as a proxy to individual behavior and actions. As in many domains, behavior does not remain static but evolves over time; one will therefore consider the sliding window model, making the assumption that behavior is stable during the considered time window.

This work will cover the detection of the specific characteristics of the individual and what distinguishes his behavior from that of all other individuals. Algorithms must have minimal memory footprint and scalability to cope with huge number of individuals. Providing and keeping results up to date in near real time is also a goal, as information is only useful for limited periods in many situations. Fortunately, approximate answers are usually adequate for most problems.

Some fast and compact methods for diversity analysis will be introduced both for unlimited time and for the sliding window model. Innovative algorithms will be proposed to describe and characterize the individual event patterns. Those algorithms will then be used to create an individual event fingerprint. Using that fingerprint one will be able to identify the individual even when the identification information is not available. Distinct uses of the fuzzy fingerprint concept will be presented for individual identification that might also be extended to specific behavior identification, classification, profiling, etc., with examples in several domains such as internet traffic analysis, telecommunications fraud detection and text authorship analysis.

Note: This seminar will be held in English, if required.