用大模型同时分析诈骗的心理操控和操作流程,提升犯罪分析的可解释性。
BEACON: A Unified Behavioral-Tactical Framework for Explainable Cybercrime Analysis with Large Language Models
- 融合心理学与攻击生命周期,构建双维度分析框架
- 比基础模型准确率提升20%,解释质量显著改善
- 适合刑侦、反诈团队用于案件关联与早期预警
网络犯罪越来越多地利用人类认知偏差,而不仅依赖技术漏洞,但现有分析框架多聚焦操作层面,忽视心理操控。本文提出BEACON,一个统一的双维度框架,将行为心理学与网络犯罪战术生命周期结合,实现结构化、可解释且可扩展的分析。基于前景理论与西尔迪尼说服原则,我们形式化了六类心理操纵类别,并建立包含十四阶段的战术生命周期。通过参数高效微调,单个大语言模型可联合完成心理与战术的多标签分类,并生成人类可读解释。在真实与合成增强的网络犯罪叙事数据集上实验显示,整体分类准确率较基线模型提升20%,推理质量在ROUGE与BERTScore指标上均有显著提高。该系统能自动将非结构化受害者叙述分解为结构化的行为与操作情报,支持更高效的网络犯罪调查、案件关联及主动骗术检测。
原文摘要 · Abstract (English)
Cybercrime increasingly exploits human cognitive biases in addition to technical vulnerabilities, yet most existing analytical frameworks focus primarily on operational aspects and overlook psychological manipulation. This paper proposes BEACON, a unified dual-dimension framework that integrates behavioral psychology with the tactical lifecycle of cybercrime to enable structured, interpretable, and scalable analysis of cybercrime. We formalize six psychologically grounded manipulation categories derived from Prospect Theory and Cialdini's principles of persuasion, alongside a fourteen-stage cybercrime tactical lifecycle spanning reconnaissance to final impact. A single large language model is fine-tuned using parameter-efficient learning to perform joint multi-label classification across both psychological and tactical dimensions while simultaneously generating human-interpretable explanations. Experiments conducted on a curated dataset of real-world and synthetically augmented cybercrime narratives demonstrate a 20 percent improvement in overall classification accuracy over the base model, along with substantial gains in reasoning quality measured using ROUGE and BERTScore. The proposed system enables automated decomposition of unstructured victim narratives into structured behavioral and operational intelligence, supporting improved cybercrime investigation, case linkage, and proactive scam detection.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。