用图神经网络分析用户行为,非侵入式识别电商恶意机器人。
Non-Intrusive Graph-Based Bot Detection for E-Commerce Using Inductive Graph Neural Networks
- 构建用户会话图,用归纳式GNN捕捉行为与关系特征。
- 在真实流量上AUC和F1均优于传统方法,冷启动场景也有效。
- 无需客户端埋点,支持实时推理和增量更新,适合落地。
恶意机器人正日益威胁电商平台,通过数据爬取、库存囤积和欺诈行为造成损失。传统防御手段如IP黑名单和验证码已难以应对现代机器人使用的代理、僵尸网络及AI逃逸策略。本文提出一种非侵入式图结构的电商机器人检测框架,将用户会话行为建模为图结构,并采用归纳式图神经网络进行分类。该方法同时捕捉行为语义与关系结构,能精准识别传统特征方法难以发现的细微自动化行为。在真实电商流量上的实验表明,所提归纳式图模型在AUC和F1分数上均优于强基线(会话级MLP)。对抗扰动和冷启动模拟显示,模型在适度图修改下仍具鲁棒性,且能有效泛化至未见过的会话与网址。该框架部署友好,无需客户端代码注入,支持实时推理与增量更新,适用于实际电商安全场景。
原文摘要 · Abstract (English)
Malicious bots pose a growing threat to e-commerce platforms by scraping data, hoarding inventory, and perpetrating fraud. Traditional bot mitigation techniques, including IP blacklists and CAPTCHA-based challenges, are increasingly ineffective or intrusive, as modern bots leverage proxies, botnets, and AI-assisted evasion strategies. This work proposes a non-intrusive graph-based bot detection framework for e-commerce that models user session behavior through a graph representation and applies an inductive graph neural network for classification. The approach captures both relational structure and behavioral semantics, enabling accurate identification of subtle automated activity that evades feature-based methods. Experiments on real-world e-commerce traffic demonstrate that the proposed inductive graph model outperforms a strong session-level multilayer perceptron baseline in terms of AUC and F1 score. Additional adversarial perturbation and cold-start simulations show that the model remains robust under moderate graph modifications and generalizes effectively to previously unseen sessions and URLs. The proposed framework is deployment-friendly, integrates with existing systems without client-side instrumentation, and supports real-time inference and incremental updates, making it suitable for practical e-commerce security deployments.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。