Monitoring communications
Methods, computer readable media, and apparatuses for monitoring communications are presented. A first username may be compared with a second username. The first username may be associated with a sender of a communication, and the second username may be associated with a recipient of the communication. Thereafter, based on the comparing, the probability that the first username and the second username are both associated with a single entity may be determined. In at least one arrangement, in response to determining that the probability exceeds a threshold, it may be determined that the first username and the second username are both associated with the single entity. In at least one additional arrangement, the threshold may be modified automatically based on previously analyzed incident data.
1. A method, comprising:
comparing a first username with a second username, the first username being associated with a sender of a communication, and the second username being associated with a recipient of the communication;
determining, based on the comparing, a probability that the first username and the second username are both associated with a single entity;
determining whether the probability that the first username and the second username are both associated with a single entity exceeds a threshold;
responsive to determining that the probability that the first username and the second username are both associated with a single entity exceeds the threshold, referring the communication to a review process;
responsive to determining that the probability that the first username and the second username are both associated with a single entity does not exceed the threshold, failing to refer the communication to the review process; and
adjusting the threshold based on whether one or more communications referred to the review process were determined during the review process to have a first username associated with a sender of the one or more communications and a second username associated with a recipient of the one or more communications that are both associated with a single entity.
2. The method of claim 1 , wherein comparing a first username with a second username includes determining whether the first username and the second username are an exact match.
3. The method of claim 1 , wherein comparing a first username with a second username includes:
parsing the first username on a delimiter to produce a parsed string; and
determining whether the parsed string is a substring of the second username.
4. The method of claim 1 , wherein comparing a first username with a second username includes determining whether a left substring of the first username is included in the second username.
5. The method of claim 1 , wherein comparing a first username with a second username includes determining whether a right substring of the first username is included in the second username.
6. The method of claim 1 , further comprising:
in response to determining that the probability exceeds a threshold, determining that the first username and the second username are both associated with the single entity.
7. The method of claim 6 , further comprising:
automatically modifying the threshold based on previously analyzed incident data.
8. An apparatus, comprising:
at least one processor; and
at least one memory storing computer-executable instructions that, when executed by the at least one processor, cause the apparatus to:
compare a first username with a second username, the first username being associated with a sender of a communication, and the second username being associated with a recipient of the communication;
determine, based on the comparing, a probability that the first username and the second username are both associated with a single entity;
determine whether the probability that the first username and the second username are both associated with a single entity exceeds a threshold;
responsive to determining that the probability that the first username and the second username are both associated with a single entity exceeds the threshold, refer the communication to a review process;
responsive to determining that the probability that the first username and the second username are both associated with a single entity does not exceed the threshold, fail to refer the communication to the review process; and
adjust the threshold based on whether one or more communications referred to the review process were determined during the review process to have a first username associated with a sender of the one or more communications and a second username associated with a recipient of the one or more communications that are both associated with a single entity.
9. The apparatus of claim 8 , wherein comparing a first username with a second username includes determining whether the first username and the second username are an exact match.
10. The apparatus of claim 8 , wherein comparing a first username with a second username includes:
parsing the first username on a delimiter to produce a parsed string; and
determining whether the parsed string is a substring of the second username.
11. The apparatus of claim 8 , wherein comparing a first username with a second username includes determining whether a left substring of the first username is included in the second username.
12. The apparatus of claim 8 , wherein comparing a first username with a second username includes determining whether a right substring of the first username is included in the second username.
13. The apparatus of claim 8 , wherein the at least one memory stores additional computer-executable instructions that, when executed by the at least one processor, further cause the apparatus to:
in response to determining that the probability exceeds a threshold, determine that the first username and the second username are both associated with the single entity.
14. The apparatus of claim 13 , wherein the at least one memory stores additional computer-executable instructions that, when executed by the at least one processor, further cause the apparatus to:
automatically modify the threshold based on previously analyzed incident data.
15. At least one non-transitory computer-readable medium storing computer-executable instructions that, when executed by at least one processor, cause the at least one processor to:
compare a first username with a second username, the first username being associated with a sender of a communication, and the second username being associated with a recipient of the communication;
determine, based on the comparing, a probability that the first username and the second username are both associated with a single entity;
determine whether the probability that the first username and the second username are both associated with a single entity exceeds a threshold;
responsive to determining that the probability that the first username and the second username are both associated with a single entity exceeds the threshold, refer the communication to a review process;
responsive to determining that the probability that the first username and the second username are both associated with a single entity does not exceed the threshold, fail to refer the communication to the review process; and
adjust the threshold based on whether one or more communications referred to the review process were determined during the review process to have a first username associated with a sender of the one or more communications and a second username associated with a recipient of the one or more communications that are both associated with a single entity.
16. The at least one non-transitory computer-readable medium of claim 15 , wherein comparing a first username with a second username includes determining whether the first username and the second username are an exact match.
17. The at least one non-transitory computer-readable medium of claim 15 , wherein comparing a first username with a second username includes:
parsing the first username on a delimiter to produce a parsed string; and
determining whether the parsed string is a substring of the second username.
18. The at least one non-transitory computer-readable medium of claim 15 , wherein comparing a first username with a second username includes determining whether a left substring of the first username is included in the second username.
19. The at least one non-transitory computer-readable medium of claim 15 , wherein comparing a first username with a second username includes determining whether a right substring of the first username is included in the second username.
20. The at least one non-transitory computer-readable medium of claim 15 storing additional computer-executable instructions that, when executed by the at least one processor, further cause the at least one processor to:
in response to determining that the probability exceeds a threshold, determine that the first username and the second username are both associated with the single entity.
21. The at least one non-transitory computer-readable medium of claim 20 storing additional computer-executable instructions that, when executed by the at least one processor, further cause the at least one processor to:
automatically modify the threshold based on previously analyzed incident data.