Abstract:Privacy-centric mobile social network (PC-MSN), which allows users to build intimate and private social circles, is an increasingly popular type of online social networks (OSNs). Because of strict usage policy enforced by PC-MSNs (such as restricted account and content access), malicious accounts (or users) have to act like normal accounts to accumulate credentials before committing malicious activities. Therefore, analysis merely relying on static account profile information or social graphs is ineffective to detect such growing-up accounts. Besides, existing behavior-based malicious account detection methods fail to effectively detect growing-up accounts who pretend to be benign and have similar behaviors to benign users during the growing-up stage. In this paper, we present the first comprehensive study of growing-up behaviors of malicious accounts in WeChat, one of the major PC-MSNs with billions of daily active users across the globe. Our analysis reveals that the behavior patterns of growing-up accounts are very similar to that of benign users, and yet quite different from typical malicious accounts. Based on this observation, we design Muses, a detection system that can automatically identify subtle yet effective behaviors (features) to distinguish growing-up accounts before they engage in obvious malicious campaigns. Muses is unsupervised so that it can adapt to new malicious campaigns even if the behavior patterns of malicious accounts are unknown a priori. In particular, Muses addresses the limitations of the previous supervised techniques, i.e., requiring manually labeled training sets, which is time-consuming and costly. We evaluate Muses on a large-scale anonymized dataset from WeChat with roughly 440k accounts. The experimental results show that Muses achieves 2x recall, with similar precision, compared with the previous methods. Specifically, Muses detects over 82% growing-up accounts with a precision of 90% and achieves an AUC of 0.95. Notably, Muses can also effectively detect growing-up accounts even if malicious users applied various evasion strategies.

Deep Learning-Based Malicious Account Detection in the Momo Social Network

LSTM Android Malicious Behavior Analysis Based on Feature Weighting

DeepScan: Exploiting Deep Learning for Malicious Account Detection in Location-Based Social Networks

Heterogeneous Graph Neural Networks for Malicious Account Detection

DatingSec: Detecting Malicious Accounts in Dating Apps Using a Content-Based Attention Network

Characterizing and Detecting Malicious Accounts in Privacy-Centric Mobile Social Networks: A Case Study

Multi-modal Cyberbullying Detection on Social Networks.

LBSNShield: Malicious Account Detection in Location-Based Social Networks

On Detecting Growing-Up Behaviors of Malicious Accounts in Privacy-Centric Mobile Social Networks.

A Hybrid Deep Learning Model for Malicious Behavior Detection

An Android Malware Detection Method Using Deep Learning Based on API Calls

A Malicious Domain Detection Model Based on Improved Deep Learning

An LSTM Based Malicious Traffic Attack Detection in Industrial Internet

LGB: Language Model and Graph Neural Network-Driven Social Bot Detection

Detecting Malicious Accounts in Online Developer Communities Using Deep Learning

An efficient network behavior anomaly detection using a hybrid DBN-LSTM network

Multiple userids identification with deep learning

Early detection of serious but struggling learners in MOOCs using ensemble deep learning

Droid-Sec: Deep Learning In Android Malware Detection

A Hybrid Deep Network Framework for Android Malware Detection

A Performance-Sensitive Malware Detection System Using Deep Learning on Mobile Devices