Various systems, mediums, and methods to process requests involve retrieving a first pattern detection model that is configured to detect a plurality of first patterns based on features of the first patterns. Processing the requests also includes retrieving a plurality of second patterns and selecting a plurality of second features for detecting the plurality of second patterns. Processing the requests further includes generating a second pattern detection model by incorporating one or more of the second feature into the first pattern detection model to create an interim pattern detection model and to train the interim model by second patterns. Then a request having a request pattern is received and based on the second detection model a pattern detection score is generated for the received request. The request is processed based on the detection score. In some embodiments, the user activity patterns are associated with the requests.
