Abstract: A device may receive first information relating to a first set of transactions and a first set of chargebacks associated with the first set of transactions; process the first information to generate a processed data set; train a model to perform classification of the first set of chargebacks, where the model is to receive, as input, information relating to transactions and at least one chargeback, and where the model is to output information identifying a classification of the at least one chargeback; receive second information identifying a second set of transactions and a second set of chargebacks associated with the second set of transactions, where the second information is received from multiple, different sources; determine a classification of the second set of chargebacks using the model and based on the second information; and perform an action based on the classification of the second set of chargebacks.

Abstract: In one example, a firewall obtains a first network packet that indicates a first mobile country code of a mobile subscriber at a first time and a first mobile network code of the mobile subscriber at the first time. The firewall obtains a second network packet that indicates a second mobile country code of the mobile subscriber at a second time and a second mobile network code of the mobile subscriber at the second time. The firewall determines whether the first mobile country code is different from the second mobile country code or the first mobile network code is different from the second mobile network code. If so, the firewall determines whether a difference between the second time and the first time is less than a threshold difference. If so, the firewall associates the second network packet with a potential security threat.

Abstract: In one example, a firewall obtains a first network packet that indicates a first mobile country code of a mobile subscriber at a first time and a first mobile network code of the mobile subscriber at the first time. The firewall obtains a second network packet that indicates a second mobile country code of the mobile subscriber at a second time and a second mobile network code of the mobile subscriber at the second time. The firewall determines whether the first mobile country code is different from the second mobile country code or the first mobile network code is different from the second mobile network code. If so, the firewall determines whether a difference between the second time and the first time is less than a threshold difference. If so, the firewall associates the second network packet with a potential security threat.

Abstract: A device may receive first information relating to a first set of transactions and a first set of chargebacks associated with the first set of transactions; process the first information to generate a processed data set; train a model to perform classification of the first set of chargebacks, where the model is to receive, as input, information relating to transactions and at least one chargeback, and where the model is to output information identifying a classification of the at least one chargeback; receive second information identifying a second set of transactions and a second set of chargebacks associated with the second set of transactions, where the second information is received from multiple, different sources; determine a classification of the second set of chargebacks using the model and based on the second information; and perform an action based on the classification of the second set of chargebacks.