用强化学习操控假账号,突破图神经网络的社交机器人检测
RoBCtrl: Attacking GNN-Based Social Bot Detectors via Reinforced Manipulation of Bots Control Interaction
- 设计多智能体强化学习框架,模拟不同影响力假账号的对抗行为
- 结合扩散模型生成高保真假账号,使检测准确率下降超过30%
- 适合研究安全防御、对抗攻击与社交网络演化的人参考
社交网络已成为个人获取实时信息的重要渠道。社交机器人在平台中的影响引起广泛关注,催生了多种检测技术。然而,这些方法的脆弱性与鲁棒性仍缺乏深入研究。现有基于图神经网络(GNN)的方法因难以控制社交代理、检测器为黑盒以及机器人异质性等问题而无法直接应用。为此,本文提出首个针对GNN-based社交机器人检测器的对抗多智能体强化学习框架RoBCtrl。我们使用扩散模型通过微小修改重构现有账户数据,生成高保真假账号以规避检测,这是首次将扩散模型用于有效模拟动态社交机器人行为。随后采用多智能体强化学习(MARL)模拟机器人对抗行为,按影响力与预算对账户分类,不同智能体控制不同类别账号,通过强化学习优化攻击策略。此外,设计基于结构熵的分层状态抽象以加速训练。在多个社交机器人检测数据集上的实验表明,该框架能有效削弱GNN检测器性能。
原文摘要 · Abstract (English)
Social networks have become a crucial source of real-time information for individuals. The influence of social bots within these platforms has garnered considerable attention from researchers, leading to the development of numerous detection technologies. However, the vulnerability and robustness of these detection methods is still underexplored. Existing Graph Neural Network (GNN)-based methods cannot be directly applied due to the issues of limited control over social agents, the black-box nature of bot detectors, and the heterogeneity of bots. To address these challenges, this paper proposes the first adversarial multi-agent Reinforcement learning framework for social Bot control attacks (RoBCtrl) targeting GNN-based social bot detectors. Specifically, we use a diffusion model to generate high-fidelity bot accounts by reconstructing existing account data with minor modifications, thereby evading detection on social platforms. To the best of our knowledge, this is the first application of diffusion models to mimic the behavior of evolving social bots effectively. We then employ a Multi-Agent Reinforcement Learning (MARL) method to simulate bots adversarial behavior. We categorize social accounts based on their influence and budget. Different agents are then employed to control bot accounts across various categories, optimizing the attachment strategy through reinforcement learning. Additionally, a hierarchical state abstraction based on structural entropy is designed to accelerate the reinforcement learning. Extensive experiments on social bot detection datasets demonstrate that our framework can effectively undermine the performance of GNN-based detectors.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。