Graph-Based Temporal Behavior Analysis for Early Detection of Coordinated Malicious Accounts in Social Media Platforms
Keywords:
graph neural networks, coordinated behavior detection, temporal analysis, social media securityAbstract
The proliferation of coordinated malicious accounts poses significant threats to social media platform integrity and online discourse quality. This research proposes a comprehensive detection framework integrating heterogeneous graph neural networks with temporal behavior analysis to identify coordinated account clusters before large-scale malicious activities manifest. Our approach constructs multi-relational social graphs capturing follower networks, retweet cascades, and mention patterns while extracting time-series behavioral features including posting frequency distributions, coordination windows, and synchronized activity signatures. Experimental validation on real-world Twitter datasets demonstrates that the proposed framework achieves 89.7% detection accuracy with 87.3% F1-score, outperforming baseline methods by 4.3-17.2% across different comparison approaches. Ablation studies reveal that temporal coordination features contribute 6.7 percentage points performance improvement while heterogeneous graph structures provide 5.2 percentage points accuracy gains. The framework enables early warning capabilities detecting coordinated campaigns 4.7 days before peak malicious activity deployment.References
Q. Guyan, Y. Liu, J. Liu, and P. Zhang, "PEGNN: Peripheral-Enhanced graph neural network for social bot detection," Expert Systems with Applications, vol. 278, p. 127294, 2025. doi: 10.1016/j.eswa.2025.127294
Q. Gong, Y. Chen, X. He, Z. Zhuang, T. Wang, H. Huang, and X. Fu, "DeepScan: Exploiting deep learning for malicious account detection in location-based social networks," IEEE Communications Magazine, vol. 56, no. 11, pp. 21-27, 2018. doi: 10.1109/mcom.2018.1700575
W. W. Lo, G. Kulatilleke, M. Sarhan, S. Layeghy, and M. Portmann, "XG-BoT: An explainable deep graph neural network for botnet detection and forensics," Internet of Things, vol. 22, p. 100747, 2023. doi: 10.1016/j.iot.2023.100747
N. Righetti, and P. Balluff, "CooRTweet: A Generalized R Software for Coordinated Network Detection," Computational Communication Research, vol. 7, no. 1, p. 1, 2025. doi: 10.31219/osf.io/zya2x_v1
Z. Xia, C. Liu, N. Z. Gong, Q. Li, Y. Cui, and D. Song, "Characterizing and detecting malicious accounts in privacy-centric mobile social networks: A case study," In Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining, July, 2019, pp. 2012-2022.
Y. Zhou, D. W. Kim, J. Zhang, L. Liu, H. Jin, H. Jin, and T. Liu, "Proguard: Detecting malicious accounts in social-network-based online promotions," IEEE Access, vol. 5, pp. 1990-1999, 2017.
I. Ben Sassi, and S. Ben Yahia, "Malicious accounts detection from online social networks: a systematic review of literature," International Journal of General Systems, vol. 50, no. 7, pp. 741-814, 2021. doi: 10.1080/03081079.2021.1976773
H. Huang, H. Tian, X. Zheng, X. Zhang, D. D. Zeng, and F. Y. Wang, "CGNN: A compatibility-aware graph neural network for social media bot detection," IEEE Transactions on Computational Social Systems, vol. 11, no. 5, pp. 6528-6543, 2024.
H. Peng, Y. Zhang, H. Sun, X. Bai, Y. Li, and S. Wang, "Domain-aware federated social bot detection with multi-relational graph neural networks," In 2022 International Joint Conference on Neural Networks (IJCNN), July, 2022, pp. 1-8. doi: 10.1109/ijcnn55064.2022.9892366
M. Zhou, D. Zhang, Y. Wang, Y. A. Geng, Y. Dong, and J. Tang, "Lgb: Language model and graph neural network-driven social bot detection," IEEE Transactions on Knowledge and Data Engineering, 2025.
