Actimize Ltd.

A computer-implemented method for determining when an update of an online ML model is required. The computer-implemented method includes: (i) receiving a batch of financial transactions data; (ii) selecting a set of features from the one or more features; (iii) detecting a drift and a drift type in each feature in the selected set of features, by operating a drift detection model thereon; (iv) generating a batch-representation-vector of drift type for each feature in the selected set of features; (v) receiving a predicted-decision of update-needed by forwarding the generated batch-representation-vector to a trained MetaBDMM model, the predicted-decision of update-needed is one of: update-needed; and update-not-needed, and (vi) forwarding the predicted-decision of update-needed to the online ML model. When the predicted-decision of update-needed is update-needed, the online ML model performs an update and when the predicted-decision of update-needed is update-not-needed the online ML model doesn't perform the update.

A computerized-method for reducing inference latency of a containerized ML model. The computerized-method includes: (i) training an ML model on a plurality of raw features and derived features, and creating a trained ML model object; (ii) operating transformation metadata extraction for each derived feature to generate a transformation-metadata file; (iii) converting the transformation-metadata to a programming language code to yield a performant code; (iv) executing the performant code by the trained ML object to generate derived features; (v) packaging the trained ML model object and the yielded performant code by operating a model containerization service to create an ML model container image of the containerized ML model to be stored in a container registry; and (vi) configuring a platform that provides a model-hosting-service to run the ML model container image and apply the performant code on features in a request from a features management-platform to provide a calculated score.

A computerized system and method may process and detect anomalies in input data using of machine learning models and techniques. A computerized system comprising one or more processors, a memory, and a communication interface to communicate via a communication network with remote computing devices, may be used for assembling a signal based on event data items; calculating an anomaly score for the signal, which may describe a change or difference between the signal and past signals; generating an alert based on the calculated score; presenting the alert on an output computer display; and allowing or reversing data transfers performed over a communication network between physically separate computer systems based on the anomaly score. Some embodiments of the invention may include performing peer anomaly detection context anomaly detection as two separate and distinct anomaly detection procedures, using separate and distinct machine learning models and algorithms.

A system and method for analyzing data transfers using pattern mining, including: categorizing sequences of events into categories based on an order of the events in the sequences; identifying, for one or more sequences in a given category, subsequences of events in a dataset of event data using one or more data mining algorithms; and accepting or denying a data transfer based on applying logical rules to the data transfer, where the rules may be determined using the identified subsequences. In some embodiments, event sequence categories may include an order sensitive category and an order insensitive category, and identifying one or more subsequences of events may include applying a first data mining algorithm to order sensitive sequences, and applying a second data mining algorithm to order insensitive sequences; rules may be determined based on calculating metrics for identified subsequences, describing occurrences of the subsequences in the dataset of event data.

A computerized-method for testing a classification ML model of a tenant of a service provider, in a cloud-based environment. The computerized-method includes: (i) receiving an object of a classification ML model for testing from the tenant; (ii) executing an API with the received object of the classification ML model; (iii) identifying one or more tenants of the service provider based on an activity type and preconfigured characteristics by the executed API; (iv) performing an evaluation of the object of the classification ML model by operating the API on each retrieved dataset of the one or more tenants of the service provider to evaluate the object of the classification ML model and store score-results; and (v) calculating an average of the stored score-results to yield a performance-score of the classification ML model. When the performance-score is above a predefined performance-score deploying the classification ML model in a system of the tenant.

A system is adapted to automatically identify suspected fraudulent transactions. The system includes a fraud management server configured to perform these operations: receiving unlabeled transactions, each having a number of features, and storing them in a transaction repository; with the features, determining a risk score for each transaction; based on the risk scores, dividing the unlabeled transactions into bins in order of their risk scores; labeling transactions of the first bin legitimate and those of last bin as fraudulent; with the labeled transactions, training a first machine learning model; with the trained first machine learning model, labeling transactions of a second bin and a second-to-last bin as either fraudulent or legitimate; storing the labeled transactions of the first bin, second bin, second-to-last bin, and last-bin in the transaction repository; and with the labeled transactions of the first bin, second bin, second-to-last bin, and last-bin, training a second machine learning model.

A system and method for analyzing data transfers using pattern mining, including: categorizing sequences of events into categories based on an order of the events in the sequences; identifying, for one or more sequences in a given category, subsequences of events in a dataset of event data using one or more data mining algorithms; and accepting or denying a data transfer based on applying logical rules to the data transfer, where the rules may be determined using the identified subsequences. In some embodiments, event sequence categories may include an order sensitive category and an order insensitive category, and identifying one or more subsequences of events may include applying a first data mining algorithm to order sensitive sequences, and applying a second data mining algorithm to order insensitive sequences; rules may be determined based on calculating metrics for identified subsequences, describing occurrences of the subsequences in the dataset of event data.

A system and method for evaluating machine learning generated data items, including: generating, by a machine learning model, an output data item based on an input data item, where the output item represents or corresponds to the input item (e.g., the output item is a textual description of a non-textual input item); computing a similarity value between the output item and the input item; and performing an exchange of data between remotely connected computer systems (such as, e.g., sending or transmitting the output item, or a computerized command to update or retrain the machine learning model) based on a comparison of the computed similarity value to a benchmark similarity value.

A computerized-method for building ensemble of supervised and unsupervised Machine Learning (ML) models for fraud-predictions, for a client having an extremely-imbalanced-dataset, is provided herein. The computerized-method includes: (i) receiving an extremely-imbalanced-dataset from a client for building a ML model; (ii) retrieving datasets of other clients; (iii) identifying a rate-of-dataset-imbalance for each retrieved dataset; (iv) routing each dataset of ‘K’ datasets with identified rate-of-dataset-imbalance above a preconfigured-threshold to supervised ML models for training thereof and to yield a trained-object; (v) training a meta-learning-supervised ML model by providing the ‘K’ yielded trained-objects; (vi) routing each dataset of ‘L’ datasets with identified rate-of-dataset-imbalance below a preconfigured-threshold to an unsupervised ML model to generate clusters; (vii) combining the ‘k’ supervised ML models and the ‘L’ unsupervised ML models into ensemble ML models; and (viii) deploying the ensemble ML models in a financial-system in production-environment for prediction of fraud in a financial-transaction.

An autonomous fraud/AML reporting system and methods are provided that are configured to automate validations of SAR narratives using a generative AI service by an automated SAR narrative system. The system includes a processor and a computer readable medium operably coupled thereto, the computer readable medium comprising a plurality of instructions stored in association therewith that are accessible to, and executable by, the processor, to perform narrative validation operations which include receiving a SAR narrative for a SAR, loading a prompt template associated with validating the SAR narrative by the generative AI service, injecting the narrative into the prompt templates, and generating and storing the validation based on the comparing.