Abstract: A management system for cross-network assessment of transactions for provider reputation receives a provider string associated with a provider identification and that includes a provider score. The provider identification is extracted from the provider string. In view of the provider identification, a potential merchant identification code is determined from a set of known merchant identification codes. At least one transaction associated with the potential merchant identification code can be identified by analyzing transaction data stored in a structured data resource associated with the management system. In view of the provider score, a transaction score is assigned to each transaction associated with the potential merchant identification code. The transaction score is stored. Merchant statistics are determined by analyzing the at least one transaction. A report is generated in view of the merchant statistics and the transaction score. The report is provided for display via a graphical user interface.

Abstract: A method of verifying the destination of a transaction between nodes in a network includes receiving transaction information corresponding to a transaction between the nodes, where the transaction information comprises a unique destination identifier and a destination name and where the unique destination identifier defines a destination account of the transaction; obtaining from a storage unit a set of names used in previous transactions to that destination account; determining at least one disparity value between the destination name and the set of names; and producing a destination verification value based on the at least one disparity value, wherein the destination verification value is used to verify whether the transaction between nodes should proceed.

Abstract: A method of tracing messages through a network of nodes is provided, the method comprising receiving message information corresponding to a first outbound message, the message information comprising a first source identifier and a first destination identifier and determining whether the first source identifier is associated with a set of messages in a storage unit, whereby when the first source identifier is associated with a set of messages, the method comprises producing a trace request, the trace request comprising the first destination identifier and an identifier identifying the set of messages associated with the first source identifier.

Abstract: A system for simulating a network includes a request processor operably connected to a simulation engine. The request processor receives a request for network simulation data and input data relating to a topology of a network including node data and relationship data with relationship parameters. The simulation engine outputs a stream of event data based on the relationship data to the request processor and generates respective events by determining a source node and a destination node and corresponding relationship parameters, determining an event time, and determining a transfer value.

Abstract: A method of tracing messages through a network of nodes is provided, the method comprising receiving message information corresponding to a first outbound message, the message information comprising a first source identifier and a first destination identifier and determining whether the first source identifier is associated with a set of messages in a storage unit, whereby when the first source identifier is associated with a set of messages, the method comprises producing a trace request, the trace request comprising the first destination identifier and an identifier identifying the set of messages associated with the first source identifier.

Abstract: A system for simulating a network includes a request processor operably connected to a simulation engine. The request processor receives a request for network simulation data and input data relating to a topology of a network including node data and relationship data with relationship parameters. The simulation engine outputs a stream of event data based on the relationship data to the request processor and generates respective events by determining a source node and a destination node and corresponding relationship parameters, determining an event time, and determining a transfer value.

Abstract: A network simulation system comprises a request processor and a simulation engine. The request processor receives node data indicative of resource levels of nodes of the network, and relationship data indicative of relationship parameters of a plurality of relationships between the nodes. The simulation engine outputs a stream of event data based on the relationship data.

Abstract: The present disclosure concerns a computer-implemented method for forensically analysing and determining a network associated with a network security threat. The method comprises: obtaining details of a flagged network event comprising data associated with a network security threat, the network event being between a first dataset and a destination dataset; tracing the data associated with the network security threat from the first dataset to a further dataset, the tracing involving obtaining details of at least one past network event between the first dataset and the further dataset; comparing details of the further dataset to predefined criteria to identify whether the further dataset is an intermediate dataset or a source dataset from which the data originated and adding the details of the further dataset to a forensic report; outputting the forensic report.

Abstract: A computer-implemented method for training a machine learning model to identify one or more network events associated with a network and representing a network security threat, the one or more network events being within a population comprising a plurality of network events, the method comprising: obtaining a dataset comprising data representative of the plurality of network events; defining a machine learning model associated with a type of network event and having an associated first feature vector; generating a training dataset comprising a fraction of the dataset, the fraction associated with network events corresponding to the type of network event; and training the machine learning model using the training dataset to produce a trained machine learning model.

Abstract: A method of building a set of traceable messages through a network of nodes is provided, the method comprising receiving message information corresponding to a first message, the message information comprising a first source identifier and a first destination identifier and determining whether the source identifier is associated with a set of previous messages, whereby when the first source identifier is associated with a set of previous messages, the method comprises identifying the first message as also belonging to the set of previous messages and when the first source identifier is not associated with a set of previous messages, the method comprises identifying the first message as belonging to a new set of messages, the method further comprising associating the first destination identifier with the set of messages to which the first message belongs, such that if a second message is sent from that destination, the second message will be identified as belonging to that set of messages.

Abstract: A data processing method comprising: recording a plurality of electronic value transfers occurring between a plurality of parties; performing an optimisation process on a matrix indicative of a value of each of net electronic value transfers between each of the parties, wherein the matrix is indicative of a relationship between a first electronic store of value held by each of the parties before execution of the net electronic value transfers and a second electronic store of value held by each of the parties after execution of the net electronic value transfers, and the optimisation process comprises selecting a portion of the electronic value transfers for determining the net electronic value transfers indicated by the matrix so as to minimise a difference between the first and second electronic stores of value held by each of the parties; and outputting the selected portion of the electronic value transfers for processing.

Abstract: A method of verifying the destination of a transaction between nodes in a network includes receiving transaction information corresponding to a transaction between the nodes, where the transaction information comprises a unique destination identifier and a destination name and where the unique destination identifier defines a destination account of the transaction; obtaining from a storage unit a set of names used in previous transactions to that destination account; determining at least one disparity value between the destination name and the set of names; and producing a destination verification value based on the at least one disparity value, wherein the destination verification value is used to verify whether the transaction between nodes should proceed.

Abstract: A method of tracing messages through a network of nodes is provided, the method comprising receiving message information corresponding to a first outbound message, the message information comprising a first source identifier and a first destination identifier and determining whether the first source identifier is associated with a set of messages in a storage unit, whereby when the first source identifier is associated with a set of messages, the method comprises producing a trace request, the trace request comprising the first destination identifier and an identifier identifying the set of messages associated with the first source identifier.

Abstract: A method of building a set of traceable messages through a network of nodes is provided, the method comprising receiving message information corresponding to a first message, the message information comprising a first source identifier and a first destination identifier and determining whether the source identifier is associated with a set of previous messages, whereby when the first source identifier is associated with a set of previous messages, the method comprises identifying the first message as also belonging to the set of previous messages and when the first source identifier is not associated with a set of previous messages, the method comprises identifying the first message as belonging to a new set of messages, the method further comprising associating the first destination identifier with the set of messages to which the first message belongs, such that if a second message is sent from that destination, the second message will be identified as belonging to that set of messages.

Abstract: A network simulation system comprises a request processor and a simulation engine. The request processor receives node data indicative of resource levels of nodes of the network, and relationship data indicative of relationship parameters of a plurality of relationships between the nodes. The simulation engine outputs a stream of event data based on the relationship data.