arXiv Science⌕ Search

arXiv · 2610.17533

A null model to detect coordinated online behavior integrating evidence from multiple indicators

Abstract

Coordinated online accounts can amplify messages and manipulate attention, but detecting such behavior is challenging due to confounding factors like account activity and item popularity. We propose a statistical null-model framework that assesses behavioral similarity between accounts by comparing observed coordination indicators against activity- and popularity-conditioned reference distributions. By combining evidence across multiple indicators and partners, our method can identify suspicious coordination links more accurately. Evaluations on nine labeled information-operation datasets involving over 152 thousand accounts show that aggregating p-values multiplicatively across indicators and partners yields improved detection performance. While results vary across information operations, this approach offers a generalizable and statistically principled tool for uncovering coordinated online behavior.

Explore related subjects

Keep this discovery

Explore connections, maps & timelines

BibTeXRIS

Filipi Nascimento Silva, Manita Pote, Lake Yin, Luca Luceri, Filippo Menczer, Alessandro Flammini. 2026-10-13. A null model to detect coordinated online behavior integrating evidence from multiple indicators. https://arxiv.org/abs/2610.17533

Cite the original work for its findings. Save a collection to share your selection of sources.

KEEP EXPLORING

Related papers

Ensemble-based Deep Multilayer Community Search

Multilayer graphs, consisting of multiple interconnected layers, are widely used to model diverse relationships in the real world. A community is a cohesive subgraph that offers valuable insights for analyzing (multilayer) graphs. Recently, there has been an emerging trend focused on searching query-driven communities within the multilayer graphs. However, existing methods for multilayer community search are either 1) rule-based, which suffer from structure inflexibility; or 2) learning-based, which rely on labeled data or fail to capture layer-specific characteristics. To address these, we propose EnMCS, an Ensemble-based unsupervised (i.e., label-free) Multilayer Community Search framework. EnMCS contains two key components, i.e., HoloSearch which identifies potential communities in each layer while integrating both layer-shared and layer-specific information, and EMerge which is an Expectation-Maximization (EM)-based method that synthesizes the potential communities from each layer into a consensus community. Specifically, HoloSearch first employs a graph-diffusion-based model that integrates three label-free loss functions to learn layer-specific and layer-shared representations for each node. Communities in each layer are then identified based on nodes that exhibit high similarity in layer-shared representations while demonstrating low similarity in layer-specific representations w.r.t. the query nodes. To account for the varying layer-specific characteristics of each layer when merging communities, EMerge models the error rates of layers and true community as latent variables. It then employs the EM algorithm to simultaneously minimize the error rates of layers and predict the final consensus community through iterative maximum likelihood estimation. Experiments over 10 real-world datasets highlight the superiority of EnMCS in terms of both efficiency and effectiveness.

cs.SI↗

Beyond Parents? Prediction Gaps in University Completion Using Population-Scale Networks and Flexible Machine Learning

How predictable is children's educational attainment from the wider social contexts in which they grow up, once parental background is known? Sociological research places households, schools, neighborhoods, and extended kin central to intergenerational reproduction, yet their predictive value beyond parental background is rarely tested. This matters because the contribution of social contexts helps distinguish whether they operate as independent sources of inequality or as channels through which parental advantage is reproduced. Using Dutch population-scale administrative data, we construct a network linking a full cohort of children aged 11-12 to parents, extended kin, classmates, household members, and neighbors, and predict university completion at ages 24-25. We compare logistic regression and gradient boosting (which use individual-level aggregates of these contexts) with graph neural networks (GNNs) operating directly on the network. We refer to differences in out-of-sample performance as prediction gaps. We find small overall prediction gaps because parental socioeconomic background captures most predictable variation; even GNNs add little once parents are known. Prediction gaps are largest among children without a registered father, especially girls and those with less-educated mothers. Methodologically, we argue that prediction gaps can support sociological theory-building: small gaps show where current theory-based models already explain what can be measured; large gaps identify where targeted mechanism-focused research is warranted.

cs.SI↗

Theoretical Analysis of DomiRank Centrality: Automorphism, Entropy, and Graph Transformations

DomiRank is a node-importance algorithm for unweighted networks, defined by a dynamical model governed by a competition-strength parameter, a dominance threshold, and a decay rate. We study its relations with graph automorphism: automorphism-related vertices share the same DomiRank value, and a graph whose values are pairwise distinct must be asymmetric; we derive DomiRank properties of regular and vertex-transitive graphs and bound the number of distinct values by that of the orbits. For DomiRank entropy, the maximum over connected graphs is attained only by regular graphs, and on the effective (truncated) distribution it decreases monotonically with the competition parameter on all four tested networks, while a sufficient-condition theorem and a refined conjecture cover the theoretical entropy; we further identify the initial entropy derivative with the degree--log-degree edge covariance, making the decrease rigorous near vanishing competition for structurally disassortative graphs (including all tested networks) and yielding an assortative counterexample; tuning sigma shifts node identification from important to dominant. We study how graph transformations (vertex similarity, partitions, edge swaps, m-products) affect the DomiRank vector, and characterize sigma's sensitivity and limits: the normalized distribution is sigma-invariant iff the degree vector is an adjacency-matrix eigenvector, and sigma interpolates between degree and least-eigenvector centrality; experiments on four real networks confirm it. DomiRank is thus a tunable complement to principal-eigenvector centrality. Since parameterization by sigma is a structural property of the measure, not a guarantee of downstream advantage, we also relate these results to the companion null-model study of how much of DomiRank's task-level edge over a degree baseline survives a degree correction.

cs.SI↗