Patent ID: 8739278
Filing Date: 2014-05-27
Classification: G06F,G06Q,G07C,G07F,H04L

Abstract:
1. A method for detecting anomalous data submitted to a software application, the method comprising: receiving, at one or more computer systems, first data submitted by at least one user of the software application via an input field of the software application; packaging, with one or more processors associated with the one or more computer systems, at least a portion of the first data submitted by the at least one user of the software application to generate a first application fingerprint that uniquely identifies submission of the first data, the first application fingerprint associated with one or more first contexts, wherein the one or more first contexts represent contexts in which the first data was submitted by the at least one user of the software application, an association between the first application fingerprint and the one or more contexts directly identifying in the first application fingerprint either the at least one user or one or more devices of the at least one user used to submit the first data; comparing, with the one or more processors associated with the one or more computer systems, the first application fingerprint with at least one second application fingerprint, wherein the at least one second application fingerprint is generated based on packaging at least a portion of second data previously submitted by an authorized user of the software application via the input field, and wherein the at least one second application fingerprint is associated with one or more second contexts substantially similar to the one or more first contexts in which the first data was submitted by the at least one user of the software application, the association between the one or more second application fingerprints directly identifying in the second application fingerprint the authorized user or one or more devices of the authorized user used to submit the second data; and calculating, with the one or more processors associated with the one or more computer systems, a risk score based on the comparison of the first application fingerprint with the at least one second application fingerprint, the risk score indicating a likelihood that the first data was submitted for a fraudulent or malicious purpose.