Abstract: Techniques are disclosed relating to identity-based risk evaluation using risk scores for different identities. The disclosed techniques include a server system that provides a service usable to perform computing operations for requesting users. The system may receive a request to perform a particular computing operation from a client device. Based on a name of a user associated with the request, the system assigns an first type of identity that is a birthright identity to the user. Based on details of the request, the system assigns additional identities to the user that are different identity types than the first type of identity. The system may score, based on accessing a risk score database storing known risk information associated with different identity types, the first type of identity and the additional identities. The system may generate a response based on the scoring and transmit the response to the client device.

Abstract: Techniques are disclosed relating to component-based risk evaluation using flow signature values. In various embodiments, the disclosed techniques include a server system providing a service usable to provide various computing operations for requesting users, where the server system includes various components with associated component identifier values. In various embodiments, different sequences of the components are usable to perform different ones of the various computing operations. In response to a request from a client device, the server system may perform a requested computing operation via a processing flow that utilizes a particular sequence of components. In various embodiments, the server system generates a particular flow signature value for that particular processing flow, including by generating a flow identifier value by combining component identifier values for the particular sequence of components.