Showing posts with label graph API. Show all posts
Showing posts with label graph API. Show all posts

Sunday, February 22, 2015

Weighted trust graph for authentication

During the hackathon (discussed in earlier post), I met with Gary.  He had come in to be play mentor, but since he couldn't devote enough time, ended up being a guest.

After engaging Neo4J in few meetups and understanding the database a bit, i was contemplating using Graph databases for authentication.  It might have consequent applications in fraud analytics too, where graph databases are used already[1]

During the discussion on the idea, Gary suggested to mould the idea differently and possibly using Trust networks/graphs, wherein each node (entities i.e. people, organisations etc) are related to each other through weighted directed relationships.  The weight of this relationship can be deduced in multiple ways, e.g. by periodic algorithms similar to search engine ranking algorithms or by asking people their trust level of others on a scale of 1 to x. x being a hypothetical standard scale that can be used as a yardstick across the network for determining level of trust.

While researching some more, I found that similar research has been done in this space [2], though applications are few to come by.

It was also pointed out in the discussion that banks don't really have a huge interest in preventing this crime.  the view was, since banks already provision for certain amount in their balance sheets for these "potential" thefts, they don't really bother so much.

I believe that the financial institutions as a single unit need to attack these fraud crimes by joining hands and leveraging best of research and technology for minimising the crime.  The technology exists for providing unto the moment information on these events, some more innovation and research is needed that can bring together the whole picture and look like a "solution"





[1]http://info.neotechnology.com/rs/neotechnology/images/Fraud%20Detection%20Using%20GraphDB%20-%202014.pdf?_ga=1.182367911.1656585956.1417700858
[2]http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.212.9978&rep=rep1&type=pdf

Saturday, February 8, 2014

Programmatic interaction with Facebook data

The last time I interacted with Facebook using a program (2011), it was fairly straightforward, and perhaps it was too simple, it was abused.  As a result, in my recent experiments, I come to find out that, they have made it so complicated (my feeling, no offence to Facebook here), that its quite hard, if not impossible to do genuine development work using Facebook API, let alone achieve something sinister.

I am a self-anointed tech junky, and therefore no one should be surprised that i took up this challenge couple of hours back to build a brand new routine to get data in/out from/to facebook using a popular and open source Data integration tool, called Pentaho 

There were two triggers, one, I had not done some core debugging based research using something new. Second, a friend of mine is building this ecommerce site, www.freemall.in for which the marketing efforts would need a simpler interface to push details to the site, instead of some human going up there and doing all.  So, this programming interface becomes the first step of the future plugin for his ecommerce venture.

As I already indicated, programming with facebook's current API is a relatively hard task, at least for couple of iterations, before you get the hang of it.  So, I started with the tutorial at pentaho's site - http://www.pentahoevalcenter.com/data-integration/advanced-data-integration/facebook/ which turns out to be based on the old Facebook API and prompted me to look elsewhere for the right way of working.

Then comes the big thing - the oAuth authentication protocol employed by Facebook, get a token of this type, then of this type. go to this site, achieve this, copy this and take it there.. Its all so much that I had to go back to google and see if there is something simpler.. and yes, god bless google, there was someone like me who had gone to all the trouble and then of documenting it... God bless his soul for this - 
http://stackoverflow.com/questions/12168452/long-lasting-fb-access-token-for-server-to-pull-fb-page-info

After this, I went ahead with the pentaho tutorial, which did work out nice and fine for me.

I was able to post couple of messages to my test page using the application that i built for this test case.

hope this collection of links at a single place helps others.