Abstract: Techniques are disclosed for detecting risk via a server system that receives, based on user activity at a device, an indication of a trigger event corresponding to a potential electronic communication. After receiving the trigger event indication and prior to receiving an indication of initiation of the electronic communication, the system executes a set of computations for the communication, including performing a multi-hop query to a graph database storing a graphical representation of a plurality of communications and storing results of the execution. In response to initiation of the electronic communication, the system retrieves, using information corresponding to entities involved in the electronic communication, one or more portions of the results of executing the set of computations the database. The system determines, based on the retrieved results, whether to approve the electronic communication.

Abstract: There are provided systems and methods for pairwise graph querying, merging, and computing for account linking. A service provider may provide an account graph system to identify pairwise similarities between different accounts based on shared data that may be identified through one or more linking characteristics. When providing pairwise graph similarities, a service provider may receive a query identifying two or more accounts and/or an account with a parameter for graph exploration and querying. The service provider may utilize connection, link, or relationship graphs, queried and generated using a graph database, to determine pairwise similarities between the designated seed account and one or more selected accounts. The graph may include vertices for different queried data points and edges connecting such queries, where directionality of the edges or other vectors may be used to identify links or hops between accounts for data querying and exploration.

Abstract: Methods and systems are presented for assisting a user to identify and evaluate features for use in a machine learning model configured to perform a task. Based on graph data associated with a graph data structure, a user interface is provided on a device. Based on user inputs received via the user interface, a feature candidate for the machine learning model is determined. The feature candidate is associated with a particular way of traversing the graph data structure to obtain attribute values associated with one or more vertices and/or one or more edges in the graph data structure. Based on the attribute values, a value corresponding to the feature candidate can be calculated. The value can be used to evaluate the effectiveness of the feature candidate in performing the task. The feature candidate can then be incorporated into the machine learning model as one of the input features.

Abstract: Systems and methods that describe a graph database system with an online component and an offline component, are provided. Write events that modify a first graph in a real-time graph database included in the online component are received. Graph logs that include changes to the first graph in the real-time graph database caused by the write events are generated. The graph logs are transmitted to an offline component of the graph database system in a chronological order. A second graph in the offline component is modified using the graph logs. The first graph and the second graph are instantiated using a graph schema.

Abstract: Systems and methods that describe a graph database system with an online component and an offline component, are provided. Write events that modify a first graph in a real-time graph database included in the online component are received. Graph logs that include changes to the first graph in the real-time graph database caused by the write events are generated. The graph logs are transmitted to an offline component of the graph database system in a chronological order. A second graph in the offline component is modified using the graph logs. The first graph and the second graph are instantiated using a graph schema.