Patent ID: 8561184

Claim:
A system, comprising: a modeling module embodied on a non-transitory computer readable medium for processing historical click data received from a client and generating one or more models, wherein each of the one or more models formulates potential collusion among entities in the historical click data as a graph partitioning problem, a vector space clustering problem, or a combination thereof; a toolkit comprising a plurality of heuristics for solving problems formulated by the modeling module, the problems including graph partitioning problems, vector space clustering problems, or a combination thereof, wherein the plurality of heuristics comprises: a first set of heuristics for solving graph partitioning problems formulated by the modeling module to generate subgraphs of connected nodes representing entities involved in suspicious activities; a second set of heuristics for solving vector space clustering problems formulated by the modeling module to generate high dimensional vector space clusters or groups of entities having similar patterns over a period of time; and a third set of heuristics for transforming graphs into vector spaces and performing clustering associated therewith; and a post processor comprising a set of rules for filtering results from the toolkit, extracting entities of interest, and placing the entities of interest on global block lists, wherein filtering the results comprises eliminating subgraphs that do not meet a density requirement and removing known entities to eliminate or reduce false positives.