Foundational Study on Authorship Attribution of Japanese Web Reviews for Actor Analysis
Organizations: Faculty of Engineering and Design, Kagawa University · Trend Micro, Inc. · JC3 Japan Cybercrime Control Center
Abstract
This study investigates the applicability of authorship attribution based on stylistic features to support actor analysis in threat intelligence. As a foundational step toward future application to dark web forums, we conducted experiments using Japanese review data from clear web sources. We constructed datasets from Rakuten Ichiba reviews and compared four methods: TF-IDF with logistic regression (TF-IDF+LR), BERT embeddings with logistic regression (BERT-Emb+LR), BERT fine-tuning (BERT-FT), and metric learning with -nearest neighbors (Metric+kNN). Results showed that BERT-FT achieved the best performance; however, training became unstable as the number of authors scaled to several hundred, where TF-IDF+LR proved superior in terms of accuracy, stability, and computational cost. Furthermore, Top- evaluation demonstrated the utility of candidate screening, and error analysis revealed that boilerplate text, topic dependency, and short text length were primary factors causing misclassification.
Figures & tables
| Author (Year) | Method | Lang. | Length | Dataset | Role |
| Classical Stylometry | |||||
| Mosteller & Wallace (1964) ( Mosteller and Wallace, 1964 ) | Bayes + function words | En | Long | Political documents, few authors | |
| Stamatatos (2009) ( Stamatatos, 2009 ) | Feature + classifier + evaluation (Survey) | Multi | – | Various corpora (survey) | |
| Jin & Murakami (2007) ( Jin and Murakami, 2007 ) | RF + stylistic features | Ja | Long | Novels/essays/diaries | |
| Challenges of Conventional Methods (Scale, Topic Dependency) | |||||
| Luyckx & Daelemans (2010) ( Luyckx and Daelemans, 2010 ) | Scale factor analysis ( , ) | En | Short | Email, etc. (variable , ) | |
| Item | Value |
|---|---|
| Number of authors | 100 |
| Total reviews | 68,222 |
| Posts/author (min–median–max) | 419 – 548 – 2,489 |
| Posts/author (mean SD) | 682.22 472.6 |
| Chars/review (median) | 60 |
| Chars/review (mean) | 118.45 |
| Item | Value |
|---|---|
| Number of authors | 1,000 |
| Total reviews | 294,443 |
| Posts/author (min–median–max) | 186 – 242 – 2,489 |
| Posts/author (mean) | 294.44 |
| Chars/review (median) | 53 |
| Chars/review (mean) | 88.76 |
| Item | Setting (Key Parameters) |
|---|---|
| Common | Stratified 5-fold cross-validation (seed=42); Metrics: Accuracy, Macro-F1, Top- ( ) |
| TF-IDF | Character 2-gram to 3-gram, max_features=10,000 |
| LR | , solver=lbfgs, max_iter=1,000 |
| BERT (Emb/FT) | cl-tohoku/bert-base-japanese-v3 , max length 128 |
| BERT-FT | AdamW, epochs=10, batch=16, weight_decay=0.01, warmup_steps=100, fp16 |
| Metric+kNN | BatchHardTripletLoss, normalize=True, kNN: cosine, |
| Method | Acc | Macro-F1 | Acc | Macro-F1 | Acc | Macro-F1 | Acc | Macro-F1 |
|---|---|---|---|---|---|---|---|---|
| TF-IDF+LR | 0.7372 | 0.7343 | 0.7903 | 0.7889 | 0.8157 | 0.8156 | 0.8314 | 0.8323 |
| BERT-Emb+LR | 0.7059 | 0.7059 | 0.7467 | 0.7464 | 0.7636 | 0.7644 | 0.7772 | 0.7781 |
| BERT-FT | 0.7663 | 0.7662 | 0.8143 | 0.8127 | 0.8420 | 0.8415 | 0.8624 | 0.8597 |
| Metric+kNN | 0.6902 | 0.6778 | 0.7369 | 0.7283 | 0.7595 | 0.7542 | 0.7793 | 0.7735 |
| Method | Acc | Macro-F1 | Top-5 | Train | Infer |
|---|---|---|---|---|---|
| TF-IDF+LR | 0.8622 | 0.8459 | 0.9576 | 36.72 | 0.94 |
| BERT-FT | 0.8827 | 0.8610 | 0.9621 | 1063.99 | 7.70 |
| TF-IDF+LR | BERT-FT | |||||
|---|---|---|---|---|---|---|
| Acc | Macro-F1 | Top-5 | Acc | Macro-F1 | Top-5 | |
| 500 | 0.8426 | 0.8416 | 0.9484 | 0.8489 | 0.8454 | 0.9510 |
| 1000 | 0.8567 | 0.8473 | 0.9548 | 0.8694 | 0.8569 | 0.9579 |
| 1500 | 0.8584 | 0.8464 | 0.9561 | 0.8710 | 0.8537 | 0.9592 |
| TF-IDF+LR | BERT-FT | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Acc | Macro-F1 | Top-5 | Top-10 | Time(s) | Acc | Macro-F1 | Top-5 | Top-10 | Time(s) | ||
| 2 | 372 | 0.997 0.005 | 0.997 0.005 | 1.000 | 1.000 | 3 | 1.000 0.000 | 1.000 0.000 | 1.000 | 1.000 | 61 |
| 5 | 930 | 0.975 0.012 | 0.975 0.012 | 1.000 | 1.000 | 4 | 0.983 0.009 | 0.983 0.009 | 1.000 | 1.000 | 97 |
| 10 | 1,860 | 0.901 0.012 | 0.900 0.012 | 0.989 | 1.000 | 3 | 0.936 0.015 | 0.936 0.015 | 0.996 | 1.000 | 144 |
| 20 | 3,720 | 0.897 0.015 | 0.898 0.015 | 0.978 | 0.994 | 6 | 0.901 0.014 | 0.901 0.013 | 0.981 | 0.995 | 326 |
| 50 | 9,300 | 0.867 0.010 | 0.867 0.010 | 0.956 | 0.985 | 16 | 0.871 0.011 | 0.870 0.011 | 0.967 | 0.988 | 717 |
Authorship Attribution
Authorship attribution identifies or verifies who wrote a text, code sample, or other creative work from patterns in its style and content.
See all 66 papers