RoBCtrl: Attacking GNN-Based Social Bot Detectors via Reinforced Manipulation of Bots Control Interaction
On the map: Deep reinforcement learning methods → Adversarial robustness and RL in finance
Abstract (arXiv)
Social networks have become a crucial source of real-time information for individuals. The influence of social bots within these platforms has garnered considerable attention from researchers, leading to the development of numerous detection technologies. However, the vulnerability and robustness of these detection methods is still underexplored. Existing Graph Neural Network (GNN)-based methods cannot be directly applied due to the issues of limited control over social agents, the black-box nature of bot detectors, and the heterogeneity of bots. To address these challenges, this paper proposes the first adversarial multi-agent Reinforcement learning framework for social Bot control attacks (RoBCtrl) targeting GNN-based social bot detectors. Specifically, we use a diffusion model to generate high-fidelity bot accounts by reconstructing existing account data with minor modifications, thereby evading detection on social platforms. To the best of our knowledge, this is the first application of diffusion models to mimic the behavior of evolving social bots effectively. We then employ a Multi-Agent Reinforcement Learning (MARL) method to simulate bots adversarial behavior. We categorize social accounts based on their influence and budget. Different agents are then employed to control bot accounts across various categories, optimizing the attachment strategy through reinforcement learning. Additionally, a hierarchical state abstraction based on structural entropy is designed to accelerate the reinforcement learning. Extensive experiments on social bot detection datasets demonstrate that our framework can effectively undermine the performance of GNN-based detectors.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Adversarial robustness and RL in finance, one of 15 directions in Deep reinforcement learning methods. Builds on 53 of its 79 references that are in the map. First posted on arXiv 16 Oct 2025.
Builds on
53 of 79 references.
References · 53
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,361
- 2017Graph Attention Networkscited by 8,923
- 2017Inductive Representation Learning on Large Graphscited by 6,320
- 2019Fast Graph Representation Learning with PyTorch Geometriccited by 2,434
- 2019Simplifying Graph Convolutional Networkscited by 1,477
- 2018Predict then Propagate: Graph Neural Networks meet Personalized PageRankcited by 993
- 2018Adversarial Attacks on Neural Networks for Graph Datacited by 397
- 2022Understanding Diffusion Models: A Unified Perspectivecited by 340
- 2018Adversarial Attack on Graph Structured Datacited by 301
- 2019Adversarial Attacks on Graph Neural Networks via Meta Learningcited by 261
- 2020Enhancing Graph Neural Network-based Fraud Detectors against Camouflaged Fraudsterscited by 250
38 more
- 2019Topology Attack and Defense for Graph Neural Networks: An Optimization Perspectivecited by 196
- 2018Adversarial Attack and Defense on Graph Data: A Surveycited by 167
- 2018NetGAN: Generating Graphs via Random Walkscited by 131
- 2020GCAN: Graph-aware Co-Attention Networks for Explainable Fake News Detection on Social Mediacited by 109
- 2014The Rise of Social Botscited by 96
- 2020Heterogeneous Graph Neural Networks for Malicious Account Detectioncited by 96
- 2020DeepRobust: A PyTorch Library for Adversarial Attacks and Defensescited by 78
- 2016Hiding Individuals and Communities in a Social Networkcited by 77
- 2021TDGIA:Effective Injection Attacks on Graph Neural Networkscited by 67
- 2018Fast Gradient Attack on Network Embeddingcited by 65
- 2019Scalable and Generalizable Social Bot Detection through Data Selectioncited by 59
- 2021TwiBot-20: A Comprehensive Twitter Bot Detection Benchmarkcited by 51
- 2017The paradigm-shift of social spambots: Evidence, theories, and tools for the arms racecited by 49
- 2020A Decade of Social Bot Detectioncited by 48
- 2021Single Node Injection Attack against Graph Neural Networkscited by 45
- 2022TwiBot-22: Towards Graph-Based Twitter Bot Detectioncited by 44
- 2021Heterogeneity-aware Twitter Bot Detection with Relational Graph Transformerscited by 41
- 2021BotRGCN: Twitter Bot Detection with Relational Graph Convolutional Networkscited by 39
- 2018Deep Neural Networks for Bot Detectioncited by 37
- 2015Fame for sale: efficient detection of fake Twitter followerscited by 33
- 2020Twitter Bot Detection Using Bidirectional Long Short-term Memory Neural Networks and Word Embeddingscited by 25
- 2021SATAR: A Self-supervised Approach to Twitter Account Representation Learning and its Application in Bot Detectioncited by 24
- 2023Attacking Fake News Detectors via Manipulating News Social Engagementcited by 23
- 2020Friend or Faux: Graph-Based Early Detection of Fake Accounts on Social Networkscited by 19
- 2023BotMoE: Twitter Bot Detection with Community-Aware Mixtures of Modal-Specific Expertscited by 18
- 2024Unsupervised Social Bot Detection via Structural Information Theorycited by 18
- 2022RoSGAS: Adaptive Social Bot Detection with Reinforced Self-Supervised GNN Architecture Searchcited by 17
- 2016DNA-inspired online behavioral modeling and its application to spambot detectioncited by 16
- 2023MGTAB: A Multi-Relational Graph-Based Twitter Account Detection Benchmarkcited by 16
- 2024SeBot: Structural Entropy Guided Multi-View Contrastive Learning for Social Bot Detectioncited by 16
- 2022BIC: Twitter Bot Detection with Text-Graph Interaction and Semantic Consistencycited by 14
- 2023Hierarchical State Abstraction Based on Structural Information Principlescited by 14
- 2023FedACK: Federated Adversarial Contrastive Knowledge Distillation for Cross-Lingual and Cross-Model Social Bot Detectioncited by 12
- 2024A General Black-box Adversarial Attack on Graph-based Fake News Detectorscited by 11
- 2024BotDGT: Dynamicity-aware Social Bot Detection with Dynamic Graph Transformerscited by 10
- 2019Better Safe Than Sorry: An Adversarial Approach to Improve Social Bot Detectioncited by 8
- 2023RF-GNN: Random Forest Boosted Graph Neural Network for Social Bot Detectioncited by 5
- 2023My Brother Helps Me: Node Injection Based Adversarial Attack on Social Bot Detectioncited by 5
50 most cited of 53 All 53 (JSON)
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Beyond Individual Mimicry: Constructing Human-Like Social network with Graph-Augmented LLM Agents
- 2026Social bot detection in the age of ChatGPT: Challenges and opportunities
- 2026PIMbot: A Self-Adaptive Attack Framework for Adversarial Manipulation of Multi-Robot Reinforcement Learning
- 2024Towards Opinion Shaping: A Deep Reinforcement Learning Approach in Bot-User Interactions
- 2024RAT: Adversarial Attacks on Deep Reinforcement Agents for Targeted Behaviors
- 2025Graph Neural Networks, Deep Reinforcement Learning and Probabilistic Topic Modeling for Strategic Multiagent Settings
- 2025Distributed Detection of Adversarial Attacks in Multi-Agent Reinforcement Learning with Continuous Action Space
- 2025HARL-A: An Extensible Benchmark Framework for Heterogeneous Multi-Agent Adversarial Reinforcement Learning in IsaacLab