English

Can LLM Agents Simulate Dynamic Networks? A Case Study on Email Networks with Phishing Synthesis

Social and Information Networks 2026-05-14 v1 Artificial Intelligence Multiagent Systems

Abstract

While Large Language Model (LLM) multi-agent systems (MAS) offer a transformative approach to simulating human behavior in complex systems, it remains largely unexplored whether these simulations can replicate realistic structural and temporal dynamics from a dynamic network perspective. Our evaluation indicates that existing frameworks excel at generating plausible micro-level interactions but fail to capture the emergent, macroscopic topologies necessary for domains that rely on realistic network dynamics, such as modeling information propagation and cybersecurity threats. To bridge this gap, we introduce two easily integrable extensions to simulation frameworks to ensure they preserve macroscopic network fidelity: 1) augmenting LLM agents with data-driven event triggers to organically sustain long-horizon interactions, and 2) integrating Hawkes processes to accurately model temporal activation dynamics. Our approach allows LLM MAS to capture both plausible micro-level patterns and macroscopic topologies. We further demonstrate the utility of this framework in synthesizing realistic phishing campaigns within evolving communication networks. The study reveals how threats exploit structural vulnerabilities, highlighting the potential of our framework for developing next-generation defenses. Our code is available at https://github.com/Graph-COM/NSL.

Keywords

Cite

@article{arxiv.2605.12507,
  title  = {Can LLM Agents Simulate Dynamic Networks? A Case Study on Email Networks with Phishing Synthesis},
  author = {Siqi Miao and Ziyang Chen and Yuhong Luo and Hans Hao-Hsun Hsu and Mufei Li and Kaiqing Zhang and Pan Li},
  journal= {arXiv preprint arXiv:2605.12507},
  year   = {2026}
}