Social robot detection method based on uncertainty driving and agent dynamic arrangement, electronic equipment and storage medium

Abstract

The invention provides a social robot detection method based on uncertainty driving and agent dynamic arrangement, electronic equipment and a storage medium. The method comprises the following steps: obtaining a standardized data packet to be detected; calculating behavior entropy and detection uncertainty based on the to-be-detected data packet, and generating an agent activation signal; initializing a detection agent; outputting an accumulated evidence set based on the detection agent; converting the evidence set into a weighted undirected graph in a graph structure form; outputting a binary detection conclusion based on the weighted undirected graph; calculating a key evidence set; and obtaining a social robot detection conclusion based on the binary detection conclusion, the final abnormal risk score and the key evidence set. According to the method, behavior entropy and detection uncertainty are introduced as triggers, samples with low uncertainty are quickly intercepted or released only by using an extremely low-cost statistical rule, and intelligent agents are activated only for ambiguous samples with high uncertainty for deep detection, so that self-adaptive cost reduction and benefit increase of good steel applied to the cutting edge are realized.

Description

A social robot detection method, electronic device, and storage medium based on uncertainty-driven and agent dynamic orchestration. Technical Field

[0001] This invention belongs to the field of cyberspace security and social platform governance technology, and relates to a social robot detection method, electronic device and storage medium based on uncertainty-driven and intelligent agent dynamic orchestration. Background Technology

[0002] The continued growth in user and content volume on social media platforms has enabled automated accounts (social bots) to participate in information dissemination, interaction, public opinion guidance, and marketing activities at low cost. Social bots exhibit a clear generational evolution: from early isolated and simple bots to group bots capable of simulating real social networks, and then to new types of bots with "highly realistic simulations, human-machine integration, and adversarial detection strategies," showing an overall trend of becoming increasingly difficult to identify and more adversarial to detection strategies.

[0003] Against this backdrop, detection strategies have evolved from traditional machine learning to deep learning, graph neural networks, and even more complex reinforcement learning / large model recognition. Meanwhile, the heterogeneous distribution of social bots across different user groups / communities, with significant differences in behavior and characteristics across different communities, further increases the difficulty of using a unified detection model.

[0004] Social robot detection typically faces the following problems in engineering implementation: 1) Fixed detection process, difficult to adapt to sample differences: Many solutions adopt fixed feature extraction and fusion processes. Even if the output probability is obtained, it is difficult to adjust the strategy under different account types, different data completeness (missing modality / missing field) and different cost constraints (real-time / offline), resulting in either wasted computing power or insufficient evidence for high-risk samples.

[0005] 2) Lack of auditable evidence chain: Many deep models output "risk scores / categories" but lack verifiable "evidence chains", making it difficult to meet the requirements of "traceability, explainability, and reproducibility" in scenarios such as platform risk control, appeal review, and compliance audit.

[0006] 3) Difficulty in unified management and fusion of multi-source features: The results of tools such as text, behavior, device, interaction consistency, and collaborative signs have different granularities, scales, and confidence levels. The lack of a unified evidence expression and fusion mechanism makes the system difficult to expand and maintain.

[0007] Therefore, a new detection paradigm is needed: without relying on a "single model structure" for innovation, let the agent be the main thread, and achieve "high accuracy, low cost, and auditable" social robot detection by dynamically selecting analysis tools and constructing evidence graphs. Summary of the Invention

[0008] This invention aims to provide a social robot detection method based on uncertainty-driven and agent dynamic orchestration, in order to solve the problems of wasted computing resources, failure to detect complex disguised samples, and uninterpretable detection results in existing social robot detection technologies.

[0009] This invention provides a social robot detection method based on uncertainty-driven and agent dynamic orchestration, comprising the following steps: Step 1, obtaining the target account. Within the time range Get the text content sequence Interaction sequence and publicly available portrait metadata The data is then subjected to structured parsing to obtain standardized data packets to be detected. Step 2: Based on the data packet to be detected Calculate behavioral entropy and detection uncertainty Generate agent activation signal Step 3: Based on the agent's activation signals Initialize the detection agent; based on the current uncertainty state and under computational cost constraints, the detection agent retrieves data from a pre-set logic detection toolset. The system dynamically selects and executes the optimal tool to output structured evidence items. Based on structured evidence items The probability distribution of the current detection result is updated using a Bayesian update formula or weighted fusion logic, and the new uncertainty is recalculated. Based on the new uncertainty Determine if the iteration termination condition is met; if so, output the accumulated evidence set. Step 4: Gather the evidence Transform into a weighted undirected graph in graph structure form ; Calculate the weighted undirected graph Any pair of nodes in Determine the correlation strength and establish edge connections, and calculate the weighted undirected graph. The final influence weight of each node in the process Simultaneously, the weighted undirected graph is obtained. The final influence weight of each node in the process The highest weight in the process One evidence node; based on the final influence weight. Calculate the final abnormal risk score of the account to be detected. The final abnormal risk will be divided into Compared with the preset judgment threshold Compare and output binary detection conclusions. Step 5: Based on the highest weight A set of evidence nodes and their influence weights All evidence nodes are weighted according to their final influence. Arrange the evidence in descending order to obtain the key evidence set. Based on binary detection conclusions Final abnormal risk classification and key evidence set The social robot detection results were obtained.

[0010] Furthermore, the specific process for obtaining observable interaction data and publicly available profile metadata of the target account is as follows: Step 1.1, Receive the unique identifier of the account to be detected. Compared with the detection reference time Set the backtracking time window length to This determines the time range covered by this test. Step 1.2: Targeting the account Within the time range Get the text content sequence Interaction sequence and publicly available portrait metadata The data packet to be detected is then subjected to structured parsing. Step 1.3: Process the collected text content sequence Interaction sequence and public image metadata All data packets undergo standardization processing, resulting in standardized data packets for testing. .

[0011] Furthermore, the text content sequence Including publication timestamp Cleaned text content and content type identifier The aforementioned sequence of interactive behaviors Including the time of the behavior Public interaction type and the public identifier of the interaction object The aforementioned publicly available portrait metadata Including registration time Statistical eigenvectors and public client tags .

[0012] Furthermore, the specific process of step two is as follows: Step 2.1, constructing the behavioral time series and calculating the time entropy; from the data packet to be detected... Text content sequence in With interaction behavior sequence Extract the timestamps from all records, merge them, and sort them in ascending order to construct a comprehensive time series. Based on comprehensive time series Calculate the time interval sequence of adjacent actions Shannon entropy was used to calculate behavioral temporal entropy. Step 2.2: Extract the initial screening feature vector; construct a lightweight initial screening feature vector. Step 2.3: Initially screen the feature vectors. Input a pre-defined lightweight initial screening classifier, and output the initial prediction probability that the account is a social bot. Step 2.4: Predict probability based on initial screening The detection uncertainty is calculated using the binary entropy formula. Step 2.5: Calculate the detection uncertainty. With preset trigger threshold The comparison is performed, and two types of splitting logic are executed: direct output and agent-triggered output.

[0013] Furthermore, the calculated detection uncertainty With the preset trigger threshold The specific process of comparison is as follows: If This indicates that the initial screening features are sufficient to make a credible judgment; at this point, the probability predicted directly from the initial screening can be used. The detection process ends when the detection result is output without triggering subsequent steps. If identified as a robot, otherwise a real person; This indicates that it is difficult to make a qualitative judgment based solely on statistical characteristics; at this point, the activation signal of the generating agent is generated. and the current data packet to be detected With detection uncertainty Pass it to the next step.

[0014] Furthermore, the specific process of step three is as follows: Step 3.1, preset a set of logical analysis tools for anomaly features of different dimensions. Each tool Based on the data packet to be detected Obtain; Step 3.2, based on the state vector of the detection agent Calculate in each iteration The detection intelligent agent is based on a set of logic analysis tools. The tool not yet used in China for calculating expected utility scores The detection agent employs a greedy strategy, selecting the expected utility score. The highest tool as the current action Execute; Step 3.3, Execute the selected tool Output structured evidence items Step 3.4: Based on structured evidence items The probability distribution of the current detection result is updated using a Bayesian update formula or weighted fusion logic, and the new uncertainty is recalculated. Check if the iteration termination condition is met; if the termination condition is met, output the accumulated evidence set. Proceed to step four; if not satisfied, return to step 3.2.

[0015] Furthermore, each tool Includes the following logical units: semantic consistency analysis tools Input: Text sequence Logic: Utilize a lightweight natural language reasoning model to detect logical contradictions in the historical tweets posted by the account under test; Output: Semantic conflict score. Circadian rhythm anomaly detection tool Input: from a sequence of interactive behaviors The behavior timestamp sequence; logic: map the timestamps to a 24-hour clock disk, calculate the overlap and dispersion of the active time distribution with the normal human sleep cycle; output: rhythm abnormality score. Interactive homogeneity detection tool Input: from a sequence of interactive behaviors List of interaction objects; Logic: Analyze whether the target objects of public account interactions exhibit high homogeneity; Output: Network homogeneity score. .

[0016] Furthermore, the iteration termination condition must satisfy one of the following: Confidence level meets the threshold: Budget exhausted: , This is represented as the preset upper limit. This represents the estimated cost of the next candidate tool; tool exhaustion: all available tools have been executed.

[0017] Furthermore, the specific process of step four is as follows: construct a weighted undirected graph. Based on weighted undirected graphs Collection of evidence Each piece of evidence in the graph is mapped to a graph node. ; Calculate the weighted undirected graph Any pair of nodes in Conflict level ; Regarding the degree of conflict With preset threshold Compare; if This indicates that the node has... If the evidence is consistent with the conclusion, then establish positive support edges and assign their weights. Set to a positive value; if This indicates that the node has... The evidence contradicts the conclusions; therefore, a negative inhibition edge is established, and its weight is... Set to negative values ​​or use special markings; update the weighted undirected graph using a confidence-weighted propagation algorithm. The final influence weight of each node in the process At the same time, the one with the highest weight in the calculation process is obtained. Each piece of evidence has a node; the final influence weight of each node is used to determine the number of nodes. Calculate the final abnormal risk score of the account to be detected. The final abnormal risk will be divided into Compared with the preset judgment threshold Compare and output binary detection conclusions. .

[0018] Furthermore, based on the binary detection conclusions Final abnormal risk classification and key evidence set The specific process for obtaining the social robot detection conclusion is as follows: using a pre-set evidence interpretation template library, the binary detection conclusion is... Final abnormal risk classification and key evidence set The evidence items in the log are converted into natural language descriptions; the content of the natural language descriptions is then encapsulated into a standard JSON format audit log structure. And generate a unique hash fingerprint; the generated audit log The results are written to an immutable log storage medium and the detection conclusions are returned to the business side via an API interface; if If so, it is determined to be a robot.

[0019] As a further aspect of the present invention, the social robot detection method based on uncertainty-driven and agent dynamic orchestration further includes the following steps: Step 6, feedback loop and parameter adaptive update.

[0020] As a further aspect of the present invention, the social robot detection method based on uncertainty-driven and agent dynamic orchestration, wherein step six specifically comprises: receiving data for the account to be detected. Final manual review of labels or business processing feedback In this context, 0 represents a confirmed real person, and 1 represents an anomaly / bot; the complete context of this detection task is encapsulated into archived entries. Stored in the historical sample database; for each tool actually used in this test. Evaluate its output With vacuum label Consistency; the underlying confidence level of the tool in the knowledge base is updated using an exponential moving average algorithm. Periodically calculate the false alarm rate and false negative rate within the sliding window; if the false alarm rate exceeds the preset warning line, automatically adjust the judgment threshold in step S4. Fine-tuning was performed to obtain the updated judgment threshold. After the update is complete, the latest parameter set will be provided. Compared with the updated judgment threshold Write it to the configuration center for use in the next step of the detection process from step one to step five.

[0021] As a further aspect of the present invention, the present invention also provides an electronic device, including a memory, one or more processes, and one or more programs stored in the memory, said one or more programs including instructions for executing the social robot detection method based on uncertainty-driven and agent dynamic orchestration as described above.

[0022] As a further aspect of the present invention, the present invention also provides a storage medium including one or more programs executable by one or more processors of an electronic device, the one or more programs including instructions for executing the social robot detection method based on uncertainty-driven and agent dynamic orchestration as described above.

[0023] Compared with the prior art, the present invention has the following beneficial effects: (1) The present invention introduces behavioral entropy and detection uncertainty as triggers. For simple samples (low uncertainty), only extremely low-cost statistical rules are used to quickly intercept or allow them. Only for complex samples (high uncertainty) that are "ambiguous" are the agents activated to perform deep detection, thus realizing the adaptive cost reduction and efficiency improvement of "using the best steel on the blade". The present invention constructs a detection agent, which, based on the utility function of "maximizing information gain / cost", dynamically selects what to check next like a detective (e.g., only checking semantic logic when suspicious work and rest is found). This serial reasoning decision-making mechanism significantly improves the ability to capture new high-simulation robots. In the present invention, by constructing a dynamic evidence graph, graph theory algorithms are used to automatically handle the contradictions between evidence (conflict resolution), and finally output a natural language audit report containing "reasoning trajectory", realizing the complete transparency and traceability of the detection process. The overall detection architecture of this invention protects a two-stage detection method of "initial screening-precision testing", which is to first calculate the detection uncertainty based on behavioral time entropy, and only when the uncertainty exceeds the threshold, initialize the agent and enter the dynamic orchestration stage.

[0024] (2) Agent's decision-making logic (core algorithm): Protecting the agent's strategy of selecting detection tools based on the "expected utility function." That is: (The expected reduction in uncertainty divided by the computational cost), this "cost-effectiveness" decision-making logic defined by a mathematical formula is the soul of the algorithm in this invention.

[0025] (3) Construction and reasoning methods of evidence graphs: Protect the mechanism of using graph structure to handle multimodal conflicts. In particular, the construction rules of "supporting edges" (feature consistency) and "conflicting edges" (feature contradiction) are defined, as well as the weight update algorithm based on confidence propagation.

[0026] (4) Privacy-compliant data processing paradigm: Protect an analysis method "based on the logical characteristics of public behavior". That is, a technical approach that does not rely on user privacy data (such as device fingerprints, IPs) but instead identifies anomalies by analyzing the logical characteristics of public data (such as "semantic consistency" and "overlap of day and night rhythms").

[0027] In addition to the objectives, features, and advantages described above, the present invention has other objectives, features, and advantages. The invention will now be described in further detail with reference to the figures. Attached Figure Description

[0028] The accompanying drawings, which form part of this application, are used to provide a further understanding of the invention. The illustrative embodiments of the invention and their descriptions are used to explain the invention and do not constitute an undue limitation of the invention. In the drawings: Figure 1 is a schematic flowchart of a social robot detection method based on uncertainty-driven and agent dynamic orchestration according to an embodiment of the present invention. Detailed Implementation

[0029] To make the above-mentioned objects, features, and advantages of the present invention clearer and easier to understand, the specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that the accompanying drawings of the present invention are all in a simplified form and use non-precise proportions, and are only used to facilitate and clearly illustrate the implementation of the present invention.

[0030] Example 1: Referring to Figure 1, the social robot detection method based on uncertainty-driven and agent dynamic orchestration provided by the present invention includes the following steps: S1: Obtain the target account Within the time range Get the text content sequence Interaction sequence and publicly available portrait metadata The data is then subjected to structured parsing to obtain standardized data packets to be detected. .

[0031] This step aims to establish the basic data representation of the account to be tested. All data collection processes are based on the standard data interfaces provided by the social platform or publicly visible front-end information, and do not involve reading the user's private device information.

[0032] Preferably, the specific process for obtaining observable interaction data and publicly available profile metadata of the target account is as follows: S1.1, Determine the detection window; Receive the unique identifier of the account to be detected. Compared with the detection reference time (Usually the current moment). Set the backtracking time window length to... This determines the time range covered by this test. Time range The expression is as follows: S1.2, Obtain and parse the raw data; targeting the account Within the time range Get the text content sequence Interaction sequence and publicly available portrait metadata The data packet to be detected is then subjected to structured parsing. Data packets to be detected The expression is as follows: ;in, It is represented as a sequence of text content, which is a record of content published by the account to be tested, obtained from the historical content database of the network platform or through public timelines; Represented as an interaction behavior sequence, it consists of observable operational behaviors of the account to be detected extracted from the public interaction logs of the network platform; This refers to public profile metadata, which is non-privacy attribute information extracted from the public personal homepage of the account to be tested. Public profile metadata is used to construct the basic profile of the account to be tested.

[0033] Preferred, text content sequence The expression is: :in, The total number of text content records of the account to be tested. Represented as the first A record of text content.

[0034] Preferably, in this embodiment, the text content sequence Including publication timestamp (Converted to UTC standard time), cleaned text content (Remove HTML tags and invisible characters, but keep emojis) and content type identifiers. (Original / Forwarded / Reply).

[0035] Preferred, interaction behavior sequence The expression is as follows: ;in, The total number of interaction records of the account to be tested. Represented as the first A record of interactive behavior.

[0036] Preferably, in this embodiment, the interaction behavior sequence Including the time of the behavior Public interaction type (Including: likes, follows, unfollows, favorites) and public identifiers of the interacting objects. (For example, the ID of the post that was liked or the ID of the user that was followed). Specifically, in this embodiment, only explicit interactive behaviors visible to other users on the social network are collected for the content in the interaction behavior sequence, excluding users' private click streams or browsing history.

[0037] Preferably, in this embodiment, the publicly disclosed image metadata... Including registration time Statistical eigenvectors and public client tags Registration time The timestamp of the account to be tested is used to calculate the account's "internet age"; statistical feature vectors are also used. Includes publicly displayed follower count, number of followers, and total number of tweets; publicly displayed client tags. This refers to the source identifier string that social media platforms publicly display below tweets (e.g., "Twitter for iPhone", "Twitter Web App", "Android Client", etc.).

[0038] S1.3 Data standardization and preprocessing; for the collected text content sequences Interaction sequence and public image metadata All data packets undergo standardization processing, resulting in standardized data packets for testing. This serves as the input for calculating the uncertainty in step S2.

[0039] Preferably, in this embodiment, the standardization process includes: ① handling missing values: if If empty, mark it as "Unknown"; if statistical features are missing, pad with zeros; ②, Text encoding: for The process includes: ① Word segmentation and stop word removal; ② Converting the text into semantic vector representations using pre-trained language models (such as BERT or lightweight Word2Vec); ③ Time alignment: Verifying all timestamps. Is it in the window? Within the data, dirty data from abnormal time points is removed.

[0040] S2: Based on the data packet to be detected Calculate behavioral entropy and detection uncertainty Generate agent activation signal .

[0041] This step aims to process the data packet to be detected output in step S1. A low-cost, rapid assessment is conducted by quantifying the temporal regularity (entropy) of the behavior of the accounts to be detected and the prediction confidence of the initial screening model to calculate the detection uncertainty, which serves as the basis for deciding whether to activate subsequent high-cost intelligent agent detection.

[0042] Preferably, the specific process of S2 is as follows: S2.1, from the data packet to be detected Text content sequence in With interaction behavior sequence Extract the timestamps from all records, merge them, and sort them in ascending order to construct a comprehensive time series. Comprehensive time series The expression is as follows: ;in, For time window Total number of active users within the app.

[0043] S2.2, Based on comprehensive time series Calculate the time interval sequence of adjacent actions Time interval sequence of adjacent actions The expression is as follows: ; .

[0044] S2.3 To quantify the regularity of behavior, Shannon entropy is used to calculate the temporal entropy of behavior. The specific calculation method is as follows: The time interval sequence of adjacent actions... Discretize the data into buckets and statistically analyze the probability distribution of the occurrence of each bucket in each time interval. Time entropy The expression is as follows: ;in, It is represented as a logarithmic operation with base 2.

[0045] Technical principle: Automated scripts typically exhibit extremely low time entropy (mechanically timed sending) or extremely high time entropy (pseudo-random sending), while the time interval distribution of real users usually conforms to a Pareto distribution or a specific physiological rhythm, and their entropy value is in the middle range.

[0046] S2.4 Extracting the initial screening feature vector; To perform rapid risk assessment, a lightweight initial screening feature vector is constructed. This vector consists only of statistical features with extremely low computational cost, and does not contain complex semantic encoding or graph features; initial feature vector screening. The expression is as follows: ;in: Expressed as an activity rate ratio, (Total number of active users divided by window length); Represented as normalized metadata statistical features (taken from the statistical feature vector in step S1) ); This represents the one-hot encoding of the client tag, corresponding to the public client tag in S1. .

[0047] S2.5 Calculate the initial screening probability and uncertainty; the specific process is as follows: S2.5.1 Construct a lightweight gradient boosting decision weight model based on ensemble learning. This model has the characteristics of low computational complexity, is suitable for processing structured statistical features, and can meet the millisecond-level initial screening requirements.

[0048] Specifically, the lightweight gradient boosting decision weight model based on ensemble learning includes an input adaptation layer, an ensemble inference layer, and a probability output layer. The input adaptation layer includes a feature sparsity processing module, which optimizes the sparse matrix for "one-hot encoding of client-side labels" while directly passing through "behavioral time entropy" and "normalized statistical features," combining scalars of different dimensions into a model-readable feature matrix. The ensemble inference layer is the core computational layer of the model, consisting of K regression decision trees. Each tree is configured based on the split points of the features (e.g.,...). The samples are divided into specific leaf nodes, and each leaf node is assigned a weight score. This layer does not perform complex matrix convolution operations, but only extremely fast Boolean judgments and addition operations, ensuring a millisecond-level response speed; the probability output layer contains a Sigmoid activation function module, which is used to sum the weights of the leaf nodes of all trees in the integrated inference layer. As input ,pass Calculate the final probability.

[0049] S2.5.2, Initially screen the feature vectors The input is fed into a pre-built lightweight initial screening classifier (such as a logistic regression model or a lightweight random forest) in the input adaptation layer, and the probability output layer outputs the initial screening prediction probability that the account to be detected is a social bot. Initial screening prediction probability The expression is as follows: ; .

[0050] S2.5.3, Construct an uncertainty assessment and diversion controller; This will determine the initial screening prediction probability. In the input uncertainty assessment and diversion controller, the detection uncertainty, which measures the model's hesitation towards the current sample, is calculated using the binary entropy formula (binary entropy function). .

[0051] Detection uncertainty The expression is as follows: Numerical explanation: Initial screening prediction probability The detection uncertainty is close to 0 (confident to be a real person) or 1 (confident to be a robot). Approaching 0; the initial screening prediction probability When the value is close to 0.5 (ambiguous), the detection uncertainty is... It reached its maximum value of 1.

[0052] S2.5.4 Uncertainty Assessment and Comparison Logic Gate in the Diversion Controller Calculate the Detection Uncertainty With the preset trigger threshold (Specifically, in this embodiment, the preset trigger threshold) The comparison is set to 0.6, and a high-level signal or a low-level signal is output. The routing distributor in the uncertainty assessment and diversion controller determines the data flow direction based on the high-level signal or the low-level signal. Specifically, if the low-level signal triggers the direct output interface, then the direct output (low uncertainty branch) is executed; if the high-level signal triggers the agent initialization interface, then the agent trigger (high uncertainty branch) is executed.

[0053] Preferably, the uncertainty assessment and diversion controller is deployed after the output of the initial screening model and between the input of the detection agent, and is responsible for receiving the initial screening prediction probability from the initial screening model. And determine the subsequent calculation path.

[0054] More preferably, the uncertainty assessment and routing controller includes an uncertainty calculation unit, a threshold comparison logic gate, and a routing distributor; the input of the uncertainty calculation unit is the initial screening prediction probability output by the initial screening model. This is used to load a preset binary entropy formula and determine the initial screening prediction probability. Convert to detection uncertainty The input to the threshold comparison logic gate is the detection uncertainty. With the preset trigger threshold This is used to perform numerical comparisons and judgments; if If the output logic level is "0", then the output is low risk or low uncertainty; if If the result is "0", the output logic level is "1", indicating high uncertainty. The input to the routing distributor is the result of a threshold comparison logic gate, used to perform data flow control. If the received result of the threshold comparison logic gate is "0", the direct output interface is activated, and the initial prediction probability is increased. The result is directly mapped to the final probability; if the result of the received threshold comparison logic gate is "1", the agent initialization interface is activated to generate the agent activation signal. and the data packet to be detected With detection uncertainty Both routes are routed to S3.

[0055] Preferably, the calculated detection uncertainty is... With the preset trigger threshold The specific process of comparison is as follows: If This indicates that the initial screening features are sufficient to make a reliable judgment. At this point, the probability prediction can be directly based on the initial screening. Output the detection results without triggering subsequent steps; this detection process ends. If identified as a robot, otherwise a real person; This indicates that it is difficult to make a definitive judgment based solely on statistical characteristics (e.g., belonging to a robot with sophisticated disguise or a real person exhibiting abnormal behavior). At this point, an agent activation signal is generated. and the current data packet to be detected With detection uncertainty This is then passed to step S3.

[0056] S3: Based on agent activation signals Initialize the detection agent; based on the current uncertainty state and under computational cost constraints, the detection agent retrieves data from a pre-set logic detection toolset. The system dynamically selects and executes the optimal tool to output structured evidence items. Based on structured evidence items The probability distribution of the current detection result is updated using a Bayesian update formula or weighted fusion logic, and the new uncertainty is recalculated. Check if the iteration termination condition is met. If it is, output the accumulated evidence set. .

[0057] Preferably, step S3 specifically includes the following sub-steps: S3.1, Define a logic detection tool library; pre-configure a set of logic analysis tools for different dimensions of abnormal features in the component library. Each tool Relying solely on the data packets to be detected obtained in step S1 It does not involve the acquisition of external privacy data.

[0058] Each tool Specifically, it includes (but is not limited to) the following logical units: semantic consistency analysis tools Input: Text sequence Logic: Utilize a lightweight Natural Language Inference (NLI) model to detect logical contradictions in the historical tweets of the account being tested (e.g., the same account claiming to be in two geographically distant locations within a very short period, or conflicting identity descriptions); Output: Semantic conflict score. Circadian rhythm anomaly detection tool Input: A sequence of behavior timestamps (from a sequence of interaction behaviors) ); Logic: Map timestamps to a 24-hour clock disk, calculate the overlap and dispersion of active time distribution with normal human sleep cycles (e.g., 02:00-06:00 in the UTC+8 interval); used to detect machine characteristics of "24 / 7 operation" or "strictly fixed-point operation"; Output: Rhythm Anomaly Score Interactive homogeneity detection tool Input: A list of interactive objects (from a sequence of interactive behaviors) ); Logic: Analyze whether the target audience of public interactions (likes / shares) of accounts exhibits high homogeneity (e.g., all interaction targets are new accounts with similar registration times, or all interaction targets belong to known high-risk lists); Output: Network homogeneity score .

[0059] Preferably, in this embodiment, the lightweight natural language inference model adopts a Siamese network architecture based on knowledge distillation. Its construction process is as follows: a lightweight pre-trained model (such as DistilBERT or Albert) is selected as the base; the model is fine-tuned using a publicly available natural language inference dataset; the model's ability to identify "contradiction" labels is emphasized during training, classifying "implication" and "neutrality" as non-conflict categories, thereby outputting a single semantic conflict score.

[0060] In a further preferred embodiment, the lightweight natural language inference model logically comprises three sequentially connected module layers: a semantic encoding layer, an interactive inference layer, and a conflict resolution layer; the semantic encoding layer consists of two lightweight Transformer encoders with shared weights; it is used to receive two texts to be compared (e.g., text A "I am in Beijing", text B "I am in New York now") and map them into high-dimensional semantic vectors. and This layer is responsible for converting unstructured text into machine-computable mathematical vectors; the interactive reasoning layer includes vector concatenation and difference calculation units, used to fuse features of two semantic vectors to capture the distance and difference features of two text segments in the semantic space; the conflict discrimination layer includes a fully connected layer and a Softmax activation function; used to map the output of the interactive layer to... The probability value; its output is directly used as the "semantic conflict score". The closer the score is to 1, the higher the probability that the two texts are logically contradictory.

[0061] S3.2, Agent utility evaluation and selection strategy; the agent maintains a state vector. ,in: This represents the uncertainty at the current moment. This represents the computational cost already incurred.

[0062] In each iteration In the middle, the detection agent targets the logic analysis toolset Tools not yet used in the calculation of expected utility scores Expected utility score The expression is as follows: ;in: Represented as tools The expected reduction in uncertainty (based on the historical average information gain estimate of the tool). Represented as tools The estimated cost (such as time complexity or API call cost).

[0063] The detection agent employs a greedy strategy, selecting the expected utility score. The highest tool as the current action Execute.

[0064] S3.3, Tool Execution and Evidence Generation; Execute the selected tool. Output structured evidence items Structured evidence items The expression is as follows: ;in: Indicated as a tool identifier, This is represented as the abnormal score output by the tool (specifically, in this embodiment, Set to 0.9). This is represented as the credibility weight of the tool itself. (These are preset constants, such as a weight of 0.8 for text analysis tools and 0.6 for time analysis). It is expressed as a natural language description (e.g., "High-frequency active behavior was detected between 3 and 5 a.m.").

[0065] S3.4 Uncertainty Update and Termination Decision; Based on Structured Evidence Items The probability distribution of the current detection result is updated using a Bayesian update formula or weighted fusion logic, and the new uncertainty is recalculated. .

[0066] Check if any of the following iteration termination conditions are met: Confidence level meets the criteria: (Uncertainty is below the stopping threshold, for example, sufficient evidence has been gathered to determine it is a robot); Budget exhausted: (Total computing cost) Reaching the preset limit , (This represents the estimated cost of the next candidate tool); Tool exhaustion: all available tools have been executed.

[0067] If the termination condition is met, output the accumulated set of evidence. Proceed to step S4; otherwise, return to S3.2 to proceed to the next iteration.

[0068] S4: Constructing dynamic evidence graphs and conflict resolution.

[0069] This step receives the evidence set output from step S3 through a pre-built evidence graph construction module (which instantiates a graph object in memory, traverses the evidence set, instantiates each evidence item as a node object of the graph, and initializes the adjacency matrix). This is transformed into a graph structure, and graph theory methods are used to handle the support and conflict relationships between evidence from different sources, calculate the final weight of each piece of evidence, and thus arrive at a high-confidence detection conclusion. Step S4 specifically includes the following sub-steps: S4.1, Construct a weighted undirected graph. Based on weighted undirected graphs Collection of evidence Each piece of evidence in the graph is mapped to a graph node. .

[0070] Each node contains an attribute vector. In step four, Specifically refers to the first term in a weighted undirected graph. One piece of evidence, Less than or equal to the total number of evidence nodes; Specifically refers to the first term in a weighted undirected graph. One piece of evidence, The total number of evidence nodes is less than or equal to the total number of evidence nodes.

[0071] Weighted undirected graph The expression is: ;in, Represented as a set of nodes; Represented as a set of edges; attribute vector The expression is as follows: ;in, This represents the probability of an anomaly output by the tool (0 represents complete normality, and 1 represents complete anomaly). This represents the base confidence level of the tool.

[0072] S4.2 Calculate the weighted undirected graph Any pair of nodes in The correlation strength is determined and edge connections are established; where, Edge weights This reflects the degree of consistency among the evidence.

[0073] Compute a weighted undirected graph Any pair of nodes in Conflict level Conflict level The expression is as follows: ; Regarding the degree of conflict With preset threshold (Specifically, in this embodiment, the threshold) Set to 0.2) for comparison; if This indicates that the node has... If the evidence is consistent (mutually supporting), establish a positive support edge and assign its weight. Set to a positive value (e.g.) , (represented as the conflict degree of the node pair); if This indicates that the node has... If the evidence and conclusions contradict each other (there is a conflict), a negative inhibition edge is established, and its weight is... Set to a negative value or add a special marker.

[0074] A preferred example of a positive support edge logic is as follows: "abnormal day-night rhythm" and "high-frequency mechanical posting" occur simultaneously, mutually enhancing credibility.

[0075] A logical example of a negative inhibition edge is as follows: "The text semantics are natural (like a real person)" conflicts with "24 hours a day (like a robot)".

[0076] S4.3 Conflict resolution based on graph reasoning; using graph reasoning algorithms (such as simplified graph attention mechanisms or weighted voting methods) to resolve conflicts in weighted undirected graphs. The importance of any node in the process is reassessed in order to resolve conflicts.

[0077] The final influence weight of each node is updated using a confidence-weighted propagation algorithm. At the same time, the one with the highest weight in the calculation process is obtained. Each piece of evidence; final influence weight The expression is as follows: ;in, Represented as nodes There exists a set of neighboring nodes directly connected by edges.

[0078] Resolution principle: When a conflict occurs, the base confidence level... Evidence that is higher in rank and receives more positive support from neighboring nodes will ultimately have a higher influence weight. Evidence that is isolated and of low confidence will be amplified; conversely, the weight of isolated and low-confidence evidence will be suppressed.

[0079] For example, in the aforementioned conflict of "text as real as a human" but "work and rest as robotic," the increasing sophistication of "LLM (Limited Language Management) technology" has improved the functionality of text tools. The levels are lower, and "biological rhythms" are difficult to physically fake. The weight of the text evidence is too high, so the algorithm will automatically reduce the weight of the text evidence and tend to judge it as a robot.

[0080] S4.4, Generate the final risk score and judgment; based on the final influence weight of each node. Calculate the final abnormal risk score of the account to be detected. Final abnormal risk score The expression is as follows: The final abnormal risk will be divided into Compared with the preset judgment threshold (Specifically, in this embodiment, the determination threshold) The comparison is set to 0.75, and the binary detection conclusion is output. Binary detection conclusion The expression is as follows: After completing the calculation, the binary detection results will be... Final abnormal risk classification and the highest weight in the calculation process Each evidence node (i.e., the final influence weight) The largest node is passed to step S5 to generate an audit report.

[0081] S5: Output the detection results and an auditable chain of evidence.

[0082] This step aims to transform the mathematical reasoning results generated in step S4 into a human-readable structured audit report. By extracting high-weight evidence nodes, a complete chain of evidence is constructed, providing an interpretable basis for subsequent manual review, user complaint handling, or compliance audits. Step S5 specifically includes the following sub-steps: S5.1, Key Evidence Extraction and Sorting; Receiving the final evidence graph nodes and their influence weight set output from step S4. .

[0083] Influence weight set The expression is as follows: ;in, This represents the total number of evidence nodes. Corresponding to the The final influence weight of each evidence node.

[0084] To focus on core risk characteristics, key evidence screening is performed: all evidence nodes are weighted according to their ultimate influence. Sort in descending order.

[0085] Before selection Nodes (e.g.) (as key evidence set) Key Evidence Set The expression is as follows: ;in, This represents the primary evidence with the highest weight. This is represented by the main evidence, with the weights decreasing sequentially.

[0086] S5.2 Natural Language Report Generation: Using a pre-built evidence interpretation template library, structured key evidence is transformed into natural language descriptions.

[0087] The generation logic is as follows: Conclusion sentence generation: Based on the binary detection conclusion. and final abnormal risk classification Generate header conclusions.

[0088] Template: "Account" Determined as The risk confidence level is "Evidence chain assembly: Traversing the key evidence set" The evidence item in the document, read its description field ( ) and source tools ( (The paragraphs are then arranged into reasoning paragraphs based on their importance.)

[0089] Logical connectives: For "supporting edge" in S4, use "and" and "further confirmation"; for "winning evidence after conflict resolution", use "although...but the agent detection found...".

[0090] Preferably, the pre-built evidence interpretation template library specifically includes the following three types of mapping templates: Global conclusion template: used to describe the final binary detection result and risk level.

[0091] Example: "Account {Target_ID} is identified by the system as {Label} (social bot / normal user), with a comprehensive risk score of {Final_Score} and a confidence level of {Confidence_Level}." Tool-level feature description template: For each specific tool in the detection toolkit (such as the tools defined in S3.1), a corresponding parameterized text slot is pre-set.

[0092] For the circadian rhythm tool: If an anomaly is detected, the template "This account exhibits abnormally high-frequency operations during the inactive period {Sleep_Window} of {Time_Zone}, with an activity level of {Activity_Rate}, which is inconsistent with human physiological characteristics." For the semantic consistency tool: If an anomaly is detected, the template "The account's published content contains logical contradictions at {Conflict_Count}, for example, claiming {Location_A} in {Time_A} but claiming {Location_B} in {Time_B}." For the homogenization tool: If an anomaly is detected, the template "The account's interaction objects are highly homogenized, with {Percent}% of the interaction targets belonging to known risk groups." Logical association and conflict resolution template: Based on the edge attributes (supporting edges / suppressing edges) of the graph structure in step S4, connectives are generated to construct coherent reasoning paragraphs.

[0093] Supporting Relationship (Positive Edge): When two high-weighted pieces of evidence are consistent, use the template "Furthermore, the findings of {Evidence_A} further corroborate the conclusion of {Evidence_B}, forming a complete chain of evidence." Conflict Resolution (Negative Edge): When high-weighted evidence overwhelms low-weighted evidence, use the template "Although {Evidence_Weak} shows some normal characteristics, based on the higher confidence of {Evidence_Strong}, the system determines the former to be a spoofed feature and ultimately accepts the latter." S5.3, Construct Anti-Tampering Audit Logs; To meet audit requirements, the above information is encapsulated into a standard JSON format audit log structure. And generate a unique hash fingerprint.

[0094] Audit Log Structure Defined as follows: {"trace_id": "UUID-Timestamp", / / Unique tracking ID "decision": {"label": "Social_Bot", / / Detection conclusion Y "score": 0.85 / / Final risk score R_final},"evidence_chain": [ / / Key evidence chain E_key {"rank": 1,"tool": "T2_Circadian", / / Source tool "reason": "Account activity time is highly concentrated between 02:00-04:00, violating normal physiological rhythm","weight": 0.45 / / Weight alpha},{"rank": 2,"tool": "T1_Semantic","reason": "Published content contains a large number of repetitive templated text fragments","weight": 0.30}],"raw_ref": "Hash(D)" / / Hash reference of the original data packet (does not store the original data, only the fingerprint for verification)} S5.4, Result output and storage; the generated audit log The results are written to an immutable log storage medium and the detection conclusions are returned to the business side via an API interface.

[0095] like If the tweet is identified as a bot, the corresponding handling strategy will be triggered (such as folding the tweet, two-factor authentication, or banning the user). At the same time, the log can be pushed to the manual review platform as a "work order". Reviewers can directly use the evidence_chain field to quickly determine whether the model has been mistakenly banned, thereby greatly improving the efficiency of manual review.

[0096] S6. Feedback Loop and Adaptive Parameter Update; This step aims to establish a long-term evolutionary mechanism for the detection system. By receiving real labels from manual review or business feedback, the core parameters upon which the agent's decision-making depends are adaptively calibrated, enabling the detection method to continuously learn and resist drift as samples accumulate. Step S6 specifically includes the following sub-steps: S6.1. Sample Archiving and Label Alignment; The system receives labels for the accounts to be detected. Final manual review of labels or business processing feedback (Where 0 represents confirmed real person, and 1 represents confirmed abnormal / robot).

[0097] Encapsulate the complete context of this detection task into an archived entry. Store in the historical sample database; archive entries The expression is as follows: ;in, This is a subset of tools that the agents in S3 have actually invoked.

[0098] S6.2, Dynamic calibration of tool confidence; for each tool actually used in this test. Evaluate its output With real labels Consistency.

[0099] The tool's base confidence level in the knowledge base is updated using an exponential moving average algorithm. Baseline confidence level The expression is as follows: ;in: The smoothing coefficient (e.g., 0.01) is used to control the update rate and avoid drastic parameter fluctuations. The indicator function is set to 1 when the deviation between the tool's judgment result and the true label is less than 0.5 (i.e., the judgment is correct), and 0 otherwise.

[0100] Technical effect: Through this mechanism, the confidence weight of stable tools will gradually increase, while the weight of tools that are proven to have made misjudgments will automatically decrease, thereby realizing the "survival of the fittest" of the tool library by the agent.

[0101] S6.3, Threshold drift correction; To address the evolution of social bot attack patterns, the system periodically (e.g., every...) corrects for threshold drift. The false positive rate (FPR) and the missed positive rate (TPR) within a sliding window are statistically analyzed for each sample.

[0102] If the false alarm rate exceeds the preset warning threshold, the judgment threshold in step S4 will be automatically adjusted. Fine-tuning was performed to obtain the updated judgment threshold. Updated judgment threshold The expression is as follows: ;in, This indicates the adjustment step size. This is represented as the false alarm rate for the current window. This is expressed as the target false alarm rate.

[0103] After the update is complete, the latest parameter set will be provided. Compared with the updated judgment threshold Write it to the configuration center for use in the next S1-S5 detection process, thus completing the closed loop.

[0104] Example 2: As a further embodiment of the present invention, the present invention also provides an electronic device, including: one or more processors; a storage device for storing one or more programs; when the one or more programs are executed by the one or more processors, the one or more processors implement the aforementioned method.

[0105] In practical use, users can interact with servers, which are also electronic devices, via a network to receive or send messages. Terminal devices are generally various electronic devices equipped with a display and used through a human-computer interface, including but not limited to smartphones, tablets, laptops, and desktop computers. Various specific application software can be installed on these terminal devices as needed, including but not limited to web browsers, instant messaging software, social media platforms, and shopping apps.

[0106] Furthermore, the server is a network server that provides various services, such as a backend server that provides corresponding computing services for the raw data of the target account transmitted from the terminal device, so as to realize the processing of the social robot detection method based on uncertainty-driven and intelligent agent dynamic orchestration, calculate the social robot detection results, and finally return them to the terminal device.

[0107] Example 3: As a further embodiment of the present invention, the present invention also provides a storage medium including one or more programs executable by one or more processors of an electronic device, the one or more programs including instructions for executing the social robot detection method based on uncertainty-driven and agent dynamic orchestration as described above.

[0108] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A social robot detection method based on uncertainty-driven and agent dynamic orchestration, characterized in that, Includes the following steps: Step 1: Obtain the target account Within the time range Get the text content sequence Interaction sequence and publicly available portrait metadata The data is then subjected to structured parsing to obtain standardized data packets to be detected. Step 2: Based on the data packet to be detected Calculate behavioral entropy and detection uncertainty Generate agent activation signal Step 3: Based on the agent's activation signals Initialize the detection agent; based on the current uncertainty state and under computational cost constraints, the detection agent retrieves data from a pre-set logic detection toolset. The system dynamically selects and executes the optimal tool to output structured evidence items. ； Based on structured evidence items The probability distribution of the current detection result is updated using a Bayesian update formula or weighted fusion logic, and the new uncertainty is recalculated. Based on the new uncertainty Determine if the iteration termination condition is met; if so, output the accumulated evidence set. Step 4: Gather the evidence Transform into a weighted undirected graph in graph structure form ; Calculate the weighted undirected graph Any pair of nodes in Determine the correlation strength and establish edge connections, and calculate the weighted undirected graph. The final influence weight of each node in the process Simultaneously, the weighted undirected graph is obtained. The final influence weight of each node in the process The highest weight in the process One evidence node; Based on final influence weight Calculate the final abnormal risk score of the account to be detected. ； The final abnormal risk classification Compared with the preset judgment threshold Compare and output binary detection conclusions. Step 5: Based on the highest weight A set of evidence nodes and their influence weights All evidence nodes are weighted according to their final influence. Arrange the evidence in descending order to obtain the key evidence set. Based on binary detection conclusions Final abnormal risk classification and key evidence set The social robot detection results were obtained.

2. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to claim 1, characterized in that, The specific process for obtaining observable interaction data and publicly available profile metadata of the target account is as follows: Step 1.1: Receive the unique identifier of the account to be detected. Compared with the detection baseline time Set the backtracking time window length to This determines the time range covered by this test. ； Step 1.2, targeting the account Within the time range Get the text content sequence Interaction sequence and publicly available portrait metadata The data packet to be detected is then subjected to structured parsing. Step 1.3: Process the collected text content sequence Interaction sequence and public image metadata All data packets undergo standardization processing, resulting in standardized data packets for testing. 。 3. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to claim 2, characterized in that, The text content sequence Including publication timestamp Cleaned text content and content type identifier The aforementioned sequence of interactive behaviors Including the time of the behavior Public interaction type and the public identifier of the interaction object The aforementioned publicly available portrait metadata Including registration time Statistical eigenvectors and public client tags 。 4. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to claim 1, characterized in that, The specific process of step two is as follows: Step 2.1, constructing the behavioral time series and calculating the time entropy; from the data packet to be detected Text content sequence in With interaction behavior sequence Extract the timestamps from all records, merge them, and sort them in ascending order to construct a comprehensive time series. Based on comprehensive time series Calculate the time interval sequence of adjacent actions Shannon entropy was used to calculate behavioral temporal entropy. Step 2.2: Extract the initial screening feature vector; construct a lightweight initial screening feature vector. ； Step 2.3: Initially screen the feature vectors Input a pre-defined lightweight initial screening classifier, and output the initial prediction probability that the account is a social bot. ； Step 2.4: Predict probability based on initial screening The detection uncertainty is calculated using the binary entropy formula. Step 2.5: Calculate the detection uncertainty. With preset trigger threshold The comparison is performed, and two types of splitting logic are executed: direct output and agent-triggered output.

5. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to claim 4, characterized in that, The calculated detection uncertainty With preset trigger threshold The specific process of comparison is as follows: If This indicates that the initial screening features are sufficient to make a credible judgment; At this point, the probability is directly predicted based on the initial screening. The detection process ends when the detection result is output without triggering subsequent steps. If identified as a robot, then it is a real person. like This indicates that it is difficult to make a qualitative judgment based solely on statistical characteristics; At this time, the agent activation signal is generated. and the current data packet to be detected With detection uncertainty Pass it to the next step.

6. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to claim 5, characterized in that, The specific process of step three is as follows: Step 3.1, Pre-set a set of logical analysis tools for anomaly features of different dimensions. Each tool Based on the data packet to be detected Obtain; Step 3.2, based on the state vector of the detection agent Calculate in each iteration The detection intelligent agent is based on a set of logic analysis tools. The tool not yet used in China for calculating expected utility scores The detection agent employs a greedy strategy, selecting the expected utility score. The highest tool as the current action Execute; Step 3.3, Execute the selected tool Output structured evidence items ； Step 3.4: Based on structured evidence items The probability distribution of the current detection result is updated using a Bayesian update formula or weighted fusion logic, and the new uncertainty is recalculated. Check if the iteration termination condition is met; if the termination condition is met, output the accumulated evidence set. Proceed to step four; if not satisfied, return to step 3.

2.

7. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to claim 6, characterized in that, Each tool Includes the following logical units: semantic consistency analysis tools Input: Text sequence ； Logic: Utilize a lightweight natural language reasoning model to detect whether there are logical contradictions in the historical tweets posted by the account under test; Output: Semantic conflict score Circadian rhythm anomaly detection tool ； Input: From the sequence of interaction behaviors A sequence of behavioral timestamps; Logic: Map timestamps to a 24-hour clock disk and calculate the overlap and dispersion of active time distribution with the normal human sleep cycle; Output: Rhythm Anomaly Score ； Interactive homogeneity detection tool ； Input: From the sequence of interaction behaviors A list of interactive objects; Logic: Analyze whether the target audience of the account's public interactions exhibits a high degree of homogeneity; Output: Network homogeneity score 。 8. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to claim 6, characterized in that, The iteration termination condition must meet one of the following: Confidence level reaches the target: Budget exhausted: ， This is represented as the preset upper limit. This represents the estimated cost of the next candidate tool; tool exhaustion: all available tools have been executed.

9. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to claim 8, characterized in that, Step four involves constructing a weighted undirected graph. Based on weighted undirected graphs Collection of evidence Each piece of evidence in the graph is mapped to a graph node. ； Compute a weighted undirected graph Any pair of nodes in Conflict level ； Conflict level With preset threshold Compare; if This indicates that the node is paired with... If the evidence is consistent with the conclusion, then establish positive support edges and assign their weights. Set to a positive value; if This indicates that the node is paired with... The evidence contradicts the conclusions; therefore, a negative inhibition edge is established, and its weight is... Set to negative values ​​or use special markings; update the weighted undirected graph using a confidence-weighted propagation algorithm. The final influence weight of each node in the process At the same time, the one with the highest weight in the calculation process is obtained. Each piece of evidence has a node; the final influence weight of each node is used to determine the number of nodes. Calculate the final abnormal risk score of the account to be detected. ； The final abnormal risk classification Compared with the preset judgment threshold Compare and output binary detection conclusions. 。 10. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to claim 9, characterized in that, Based on binary detection conclusions Final abnormal risk classification and key evidence set The specific process for obtaining the social robot detection conclusion is as follows: using a pre-set evidence interpretation template library, the binary detection conclusion is... Final abnormal risk classification and key evidence set The evidence items in the log are converted into natural language descriptions; the content of the natural language descriptions is then encapsulated into a standard JSON format audit log structure. And generate a unique hash fingerprint; The generated audit log The results are written to an immutable log storage medium and the detection conclusions are returned to the business side via the API interface. like If so, it is determined to be a robot.

11. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to any one of claims 1-10, characterized in that, It also includes the following steps: Step 6: Feedback loop and adaptive parameter update.

12. The social robot detection method based on uncertainty-driven and agent dynamic orchestration according to claim 11, characterized in that, The specific process of step six is ​​as follows: receiving data for the account to be tested. Final manual review of labels or business processing feedback In this context, 0 represents a confirmed real person, and 1 represents an anomaly / bot; the complete context of this detection task is encapsulated into archived entries. Stored in the historical sample database; for each tool actually used in this test. Evaluate its output With real labels Consistency; the underlying confidence level of the tool in the knowledge base is updated using an exponential moving average algorithm. Periodically calculate the false alarm rate and false negative rate within the sliding window; if the false alarm rate exceeds the preset warning line, automatically adjust the judgment threshold in step S4. Fine-tuning was performed to obtain the updated judgment threshold. After the update is complete, the latest parameter set will be provided. Compared with the updated judgment threshold Write it to the configuration center for use in the next step of the detection process from step one to step five.

13. An electronic device, characterized in that, It includes a memory, one or more processes, and one or more programs stored in the memory, said one or more programs including instructions for executing the social robot detection method based on uncertainty-driven and agent dynamic orchestration as described in any one of claims 1-12.

14. A storage medium, characterized in that, Includes one or more programs executable by one or more processors of an electronic device, the one or more programs including instructions for performing the social robot detection method based on uncertainty-driven and agent dynamic orchestration as described in any one of claims 1-12.

Images