Slashdot Mirror


Machine Learning Susses Out Social-Network Fraud

CowboyRobot writes "Machine learning techniques can be used to detect fraud and spies on social networks based on certain features, such as the number of followers and the number of devices used to access the network. Certain characteristics of social-network accounts have a high correlation with fraud and can be used to differentiate between real and fake accounts, a researcher presenting at the SOURCE Boston Conference said this week. Using machine learning techniques, Vicente Diaz, a senior security analyst with security software firm Kaspersky Lab, found that seven characteristics of Twitter profiles could identify fraudulent accounts 91% of the time. The number of devices from which a user accesses the service, the ratio of followers to people following an account, the average number of tweets to each person, and the number of tweets to an unknown receiver are all features that correlate strongly to fraudulent accounts, he says."

42 comments

  1. we don't give a shit about spies and fraud by Anonymous Coward · · Score: 0

    it is called "reconnaissance" mission.

  2. I never tweet. by Anonymous Coward · · Score: 0

    Ergo, I am the Spy.

    Or am I the Scout who is the Spy?

    1. Re:I never tweet. by Anonymous Coward · · Score: 0

      "Ergo, I am the Spy.
      Or am I the Scout who is the Spy?"

      I am the spy who spies on you.

  3. Clear indicator by Anonymous Coward · · Score: 0
    if

    the ratio of followers to people following an account

    doesn't equal one, then fraud.

  4. Spies on Social Networks by Anonymous Coward · · Score: 0

    I feel sorry for everyone named JAMES BOND.

  5. Let me guess by Anonymous Coward · · Score: 0

    Their method recognizes 97% of all profiles on FB as fraud, because they are.

  6. In related news by s1d3track3D · · Score: 4, Funny

    In related news, social network machine learning fraud bots get algorithm update based on current fraud detection algorithms.

    1. Re:In related news by bullale · · Score: 4, Funny

      oblig xkcd

    2. Re:In related news by phdscam · · Score: 1

      Spam detection algorithms (one example, gmail's) are pretty good already. Would be nice to see Twitter/Facebook spammers gets booted via good algorithms.

  7. False positives are no problem. by Anonymous Coward · · Score: 0

    What's good about this, is that the few false positives would be from annoying assholes, so we can ban them too and nothing much will be lost.

  8. Case in point by interkin3tic · · Score: 2

    AC raises a good point: people are pretty good at ignoring spam. I just ignored it. Is this a really big problem on social network sites? The article says somewhere between 9 and 20% of user accounts on facebook are for spam. Who the hell is adding random people as friends they've never heard of before, then can't tell spam from actual communication?

    My guess is this is annoying for facebook and advertising firms who are paying money for sanctioned spamming, and they want to make sure they're not advertising to spam accounts. I mean, companies are, I guess, dropping serious money on their social media pages and accounts. To find out the only people who are following those accounts are other advertisers must really make them stop and wonder what the hell they're doing. Hilarious.

    1. Re:Case in point by nospam007 · · Score: 2

      "Who the hell is adding random people as friends they've never heard of before, then can't tell spam from actual communication?"

      He's called Everybody, I think.

    2. Re:Case in point by Deep+Esophagus · · Score: 3, Insightful

      It's not necessarily friends directly posting crap on your page. A lot of fraud/spam on Facebook comes from these pages set up specifically to attract followers so the page can be sold for huge advertising bucks. They'll post exploitative pictures of injured animals, maimed soldiers, etc. with captions like "1 SHARE = 1 RESPECT". No matter how often I've warned my friends against forwarding this stuff, they'll do exactly what they are told because they don't want to be accused of not caring about puppies or war heroes or orphans or Jesus or whatever.

      The end result is, no matter how hard I try to avoid it and how careful I am to restrict my account only to friends and colleagues I personally know, I still get spam from these phony accounts plastered all over my news feed.

    3. Re:Case in point by Cenan · · Score: 1

      Who the hell is adding random people as friends they've never heard of before, then can't tell spam from actual communication?

      Remember Mafia Wars? Or Farmville? Where the number of friends you had was directly linked to how "powerful" you were in the game? It would be those people.

      --
      ... whatever ...
    4. Re:Case in point by VortexCortex · · Score: 1

      No matter how often I've warned my friends against forwarding this stuff, they'll do exactly what they are told because they don't want to be accused of not caring about puppies or war heroes or orphans or Jesus or whatever.

      The end result is, no matter how hard I try to avoid it and how careful I am to restrict my account only to friends and colleagues I personally know, I still get spam from these phony accounts plastered all over my news feed.

      Well that explains why I get so little SPAM. My friends aren't any dumber, but they don't care about puppies or war heroes or orphans or Jesus or whatever.

      Puppies are food. War Heroes are instruments of death. Orphanages are rackets (seriously, try adopting a child some time), and Jesus stole my hubcaps.

  9. Re: Criminal fraud on Slashdot... apk by Anonymous Coward · · Score: 0

    Hmm. Your ideas are intriguing to me and I wish to subscribe to your newsletter.

  10. The spammers just get better by Geoffrey.landis · · Score: 1

    This is pretty much useless. If people start using software filters to detect social-network frauds and spammers, the frauds and spammers will simply reverse-engineer the filter algorithm and adjust their "number of devices from which a user accesses the service, the ratio of followers to people following an account, the average number of tweets to each person, and the number of tweets to an unknown receiver" to whatever values don't trigger the fraud filter.

    The spammers evolve just as fast as the filters.

    --
    http://www.geoffreylandis.com
    1. Re:The spammers just get better by Animats · · Score: 1

      This is pretty much useless.

      True. It detects incompetent spammers. Remember when warnings about spam and phishing included the suggestion to look for bad spelling? Remember when warnings about mail bombs included looking for excessive wrapping tape? It's like that.

      What you can do with a 91% successful classifier is ignore the item for search purposes.

  11. Then they find out most of them are roleplay acc by Anonymous Coward · · Score: 0

    Because every anime roleplay account I've seen have over 2000 friends.

  12. So I would be a fraud... by TheDarkMaster · · Score: 1

    ... If I had a facebook account. Using my Orkut account as an example, the software would find that I only use a single device to access (desktop pc), have few friends (but genuine) and post few reviews and comments (only what I consider important).


    In conclusion, as I do not access facebook even from my watch, do not comment on every single thing I do in my day and not have "thousands of followers", so I can only be a fraud :-)

    --
    Religion: The greatest weapon of mass destruction of all time
    1. Re:So I would be a fraud... by Jane+Q.+Public · · Score: 3, Informative

      "So I would be a fraud if I had a facebook account."

      Precisely. There are several things wrong with trying to actually use this in the real world.

      (1) 91% is not nearly good enough. Period.

      (2) Even if it were 99.9% accurate, it would still not be good enough. Because it runs into the base rate fallacy.

      (3) Similar but not related to the base rate fallacy, is that a statistical correlation between datasets of millions says nothing about an individual account.

  13. Awesome by Anonymous Coward · · Score: 0

    Another reason to never use any social network ever.

    (Hint: The social network is actually the spy in the equation, and I didn't need machine learning to figure that out.)

  14. False positive and false negative rates? by sjbe · · Score: 2

    found that seven characteristics of Twitter profiles could identify fraudulent accounts 91% of the time.

    Taking the 91% number as accurate for argument's sake, what are the false positive and false negative rates? Even a 1% false positive or false negative rate would be quite a lot of accounts when you consider how many millions of twitter accounts there are out there.

  15. My real account is fake by number17 · · Score: 2

    Most of the information I put on my facebook account is noise. I didn't really attend 10 different universities, speak 15 different languages, or was born in that other country.

    The only people that care about this are marketers. But even then, does it matter if the account is real or not? I haven't seen any good evidence that social marketing can directly relate to in-store or online purchases. Its all a scam.

    1. Re:My real account is fake by thatkid_2002 · · Score: 1

      Yep, you're not in marketing clearly.

      I think you'll find that for businesses that rely on strong ties to their customers. For many businesses one off sales don't cut it, particularly small businesses and so social networking is an essential tool. It may shock you to hear that social networking is merely the new phrase for "word of mouth" with some extra bells and whistles to help along repeat business (the whole "following" mechanic).

      Not far from where I live is a pie shop called "Piefection" - I thought it looked interesting when I travelled past, but that wasn't enough to actually get me in there. Somebody I know shared a picture through social media of their latest special and I was in there an hour later in "shut up and take my money" mode. I follow their social media page and now when I see something particularly good I drop around to pick up dinner.

      By the way, this is something not unique to me - I think you'll find it is what many "normal" people do these days.

      Get off my lawn you old fart.

  16. Gayboy strikes again! by Anonymous Coward · · Score: 0

    Come on slashdot - fix this little faggot. Regular people have to scroll down forever to get to the first real post!

    1. Re:Gayboy strikes again! by Anonymous Coward · · Score: 0

      Regular people don't read Slashdot.

  17. faggot bastard strikes again by Runaway1956 · · Score: 2

    Fix this crap, slashdot!

    --
    "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
  18. only 1 indicator needed by Anonymous Coward · · Score: 0

    The sole indicator needed for detecting social network fraud is the existing of an account on a social network.
    Everyone lies...

  19. Number of devices? by wiredlogic · · Score: 1

    The number of devices from which a user accesses the service.

    So does Twitter just publicly disclose a simple device count or the detailed information on all devices? If the latter, isn't that a whopping security hole to be exploited by people looking for targets with known vulnerable devices.

    --
    I am becoming gerund, destroyer of verbs.
  20. Real accounts look, well real? by Anonymous Coward · · Score: 0

    Fake accounts are easy to spot - just look if their profile picture looks real.

  21. Jeremiah Cornelius: Grow up by Anonymous Coward · · Score: 0

    You're embarassing yourself Jeremiah Cornelius http://slashdot.org/comments.pl?sid=3581857&cid=43276741 since you posted that using your registered username by mistake (instead of your usual anonymous coward submissions by the 100's the past 2-3 months now on slashdot) giving away it's you spamming this forums almost constantly, just as you have in the post I just replied to.

    1. Re:Jeremiah Cornelius: Grow up by Anonymous Coward · · Score: 0

      Hello Paul.

      p.s. What do you make of this?

    2. Re:Jeremiah Cornelius: Grow up by Anonymous Coward · · Score: 0

      Forty Two Tenfold has Jeremiah Cornelius = "friend" in his account on /. = obvious he's a sockpuppet account you, Jeremiah Cornelius, use. Yes we know it's you Jeremiah Cornelius that I am replying to now, you off topic troll. Jeremiah Cornelius, you blew it with your 100's of anonymous coward trollings by accidentally submitting one of them by your registered username here Jeremiah Cornelius http://slashdot.org/comments.pl?sid=3581857&cid=43276741 and you, Jeremiah Cornelius failed badly giving yourself away troll. Doing sock puppets along with that? No big trick to the likes of you, clearly caught in the act in that link above..

    3. Re:Jeremiah Cornelius: Grow up by Anonymous Coward · · Score: 0

      Paul, you fail it. Your skill is not enough.