Search arXiv⌕ Search

arXiv subjects

Yikun Ban

Publications and source records attributed to Yikun Ban.

56 records · Page 4Linked to original sources

On Finding Dense Subgraphs in Bipartite Graphs: Linear Algorithms

Detecting dense subgraphs from large graphs is a core component in many applications, ranging from social networks mining, bioinformatics. In this paper, we focus on mining dense subgraphs in a bipartite graph. The work is motivated by the task of detecting synchronized behavior that can often be formulated as mining a bipartite graph formed by the source nodes (followers, customers) and target nodes (followees, products, etc.) for malicious patterns. We introduce a new restricted biclique problem, Maximal Half Isolated Biclique (MHI Biclique), and show that the problem finds immediate applications in fraud detection. We prove that, unlike many other biclique problems such as the maximum edge biclique problem that are known to be NP-Complete, the MHI Biclique problem admits a linear time solution. We provide a novel algorithm S-tree, and its extension, S-forest, that solves the problem efficiently. We also demonstrate that the algorithms are robust against deliberate camouflaging and other perturbations. Furthermore, our approach can automatically combine and prioritize multiple features, reducing the need for feature engineering while maintaining security against unseen attacks. Extensive experiments on several public and proprietary datasets demonstrate that S-tree/S-forest outperforms strong rivals across all configurations, becoming the new state of the art in fraud detection.

cs.DS↗

BadLink: Combining Graph and Information-Theoretical Features for Online Fraud Group Detection

Frauds severely hurt many kinds of Internet businesses. Group-based fraud detection is a popular methodology to catch fraudsters who unavoidably exhibit synchronized behaviors. We combine both graph-based features (e.g. cluster density) and information-theoretical features (e.g. probability for the similarity) of fraud groups into two intuitive metrics. Based on these metrics, we build an extensible fraud detection framework, BadLink, to support multimodal datasets with different data types and distributions in a scalable way. Experiments on real production workload, as well as extensive comparison with existing solutions demonstrate the state-of-the-art performance of BadLink, even with sophisticated camouflage traffic.

cs.CR↗