Phony Profiles Detector for Social Network Fraud

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Online social networks face challenges in identifying potentially malicious profiles that are connected to known malicious users, as existing methods lack effectiveness in detecting undesirable activities originating from these profiles.

Innovation Solution

A system and method that utilize a phony profiles detector to calculate a connectedness score based on various connection categories between a seed profile and a subject profile, generating a malicious user indicator if the score exceeds a predetermined threshold, thereby identifying potentially malicious users by analyzing registration information, email, geographic location, and other shared data points.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If existing detection methods are used to identify malicious profiles, then the system maintains basic operational simplicity, but the detection effectiveness and reliability are insufficient

Engineering Contradiction:
Improvedetection effectivenessVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The detection system is segmented into multiple independent modules: a seed profile identification module that detects known malicious profiles, a connection analysis module that examines relationships between profiles, and a scoring module that calculates connectedness scores. This segmentation allows each module to specialize in specific detection tasks, improving overall reliability while maintaining manageable system complexity through modular architecture

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system transitions from traditional single-dimensional detection (examining individual profile attributes) to multi-dimensional analysis by evaluating connectedness across multiple dimensions: structural connections in the social network, temporal patterns of interaction, and attribute similarity. This dimensional expansion significantly improves detection effectiveness by capturing malicious behavior patterns that span multiple aspects of profile relationships

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Measurement precision

If comprehensive connection analysis is performed across multiple data points, then detection precision improves, but computational time and processing resources increase

Engineering Contradiction:
Improvedetection precisionVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-identifying seed profiles (known malicious profiles) and pre-establishing their connection profiles before actual detection occurs. When a new profile needs evaluation, the system compares it against these pre-computed connection patterns rather than performing comprehensive analysis from scratch, significantly reducing processing time while maintaining high detection precision

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system dynamically adjusts detection parameters including the connectedness score threshold and the weightings of different connection categories based on the specific detection context and threat level. This parameter adaptability allows the system to optimize the balance between detection precision and processing efficiency for different operational scenarios, reducing unnecessary computational overhead while maintaining high detection accuracy

Inventive Principle:
Principle #35Parameter changes

3Reliability

If the system monitors and evaluates multiple connection categories for each profile, then the ability to identify malicious profiles improves, but the operational complexity increases

Engineering Contradiction:
Improveidentification accuracyVSAvoidoperational simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system implements self-service through automated evaluation of multiple connection categories including structural connections, temporal patterns, and attribute similarities. The phony profiles detector automatically computes connectedness scores by synthesizing data from these various categories without requiring manual intervention, maintaining high identification accuracy while preserving operational simplicity through full automation

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system incorporates feedback mechanisms where detection results and analyst decisions are fed back into the system to refine future detections. When analysts review or override automated decisions, this feedback is used to adjust the connectedness score calculations and threshold settings, improving identification accuracy over time while the system continues to operate automatically, maintaining ease of use

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS10158659B1Phony profiles detector
Publication Date: 2018.12.18 MICROSOFT TECHNOLOGY LICENSING LLC
  • US10158659B1 patent drawing
  • US10158659B1 patent drawing
  • US10158659B1 patent drawing

AI summary

A phony profiles detector for an on-line social network system is described. The phony profiles detector uses characteristics of a profile that was associated with an indication that it represents a malicious user, a so-called seed profile, to identify other profiles that should be flagged as potentially the source of undesirable behavior. Based on the degree of similarity determined for a subject profile with respect to a seed profile, the phony profiles detector generates a malicious user indicator and stores it as associated with the subject profile.