The recent boom of weblogs and social media has attached increasing importance to the identification of suspicious users with unusual behavior, such as spammers or fraudulent reviewers. A typical spamming strategy is to employ multiple dummy accounts to collectively promote a target, be it a URL or a product. Consequently, these suspicious accounts exhibit certain coherent anomalous behavior identifiable as a collection. In this paper, we propose the concept of Coherent Anomaly Collection (CAC) to capture this kind of collections, and put forward an efficient algorithm to simultaneously find the top-K disjoint CACs together with their anomalous behavior patterns. Compared with existing approaches, our new algorithm can find disjoint anomaly collections with coherent extreme behavior without having to specify either their number or sizes. Results on real Twitter data show that our approach discovers meaningful and informative hashtag spammer groups of various sizes which are hard to detect by clustering-based methods.
[1]
Jeff G. Schneider,et al.
Anomaly pattern detection in categorical datasets
,
2008,
KDD.
[2]
Zhi-Hua Zhou,et al.
On Detecting Clustered Anomalies Using SCiForest
,
2010,
ECML/PKDD.
[3]
Arjun Mukherjee,et al.
Spotting fake reviewer groups in consumer reviews
,
2012,
WWW.
[4]
Ying Liu,et al.
Cluster-based outlier detection
,
2009,
Ann. Oper. Res..
[5]
Ee-Peng Lim,et al.
Detecting Extreme Rank Anomalous Collections
,
2012,
SDM.
[6]
C. F. Kossack,et al.
Rank Correlation Methods
,
1949
.
[7]
Christos Faloutsos,et al.
Fully automatic cross-associations
,
2004,
KDD.
[8]
VARUN CHANDOLA,et al.
Anomaly detection: A survey
,
2009,
CSUR.