This study investigates the applicability of authorship attribution based on stylistic features to support actor analysis in threat intelligence. As a foundational step toward future application to dark web forums, we conducted experiments using Japanese review data from clear web sources. We constructed datasets from Rakuten Ichiba reviews and compared four methods: TF-IDF with logistic regression (TF-IDF+LR), BERT embeddings with logistic regression (BERT-Emb+LR), BERT fine-tuning (BERT-FT), and metric learning with k-nearest neighbors (Metric+kNN). Results showed that BERT-FT achieved the best performance; however, training became unstable as the number of authors scaled to several hundred, where TF-IDF+LR proved superior in terms of accuracy, stability, and computational cost. Furthermore, Top-k evaluation demonstrated the utility of candidate screening, and error analysis revealed that boilerplate text, topic dependency, and short text length were primary factors causing misclassification.
Figures & tables
Author (Year)
Method
Lang.
Length
Dataset
Role
Classical Stylometry
Mosteller & Wallace (1964) ( Mosteller and Wallace, 1964 )
Bayes + function words
En
Long
Political documents, few authors
∘
Stamatatos (2009) ( Stamatatos, 2009 )
Feature + classifier + evaluation (Survey)
Multi
–
Various corpora (survey)
⊛
Jin & Murakami (2007) ( Jin and Murakami, 2007 )
RF + stylistic features
Ja
Long
Novels/essays/diaries
∘
Challenges of Conventional Methods (Scale, Topic Dependency)
Luyckx & Daelemans (2010) ( Luyckx and Daelemans, 2010 )
Scale factor analysis ( U , k )
En
Short
Email, etc. (variable U , k )
⊛
Table 1: Comparison of related work (Short = short text, Long = long text, ⊛ = core, ∘ = supplementary, △ = background).