Premium
Data poisoning attacks on neighborhood‐based recommender systems
Author(s) -
Chen Liang,
Xu Yangjun,
Xie Fenfang,
Huang Min,
Zheng Zibin
Publication year - 2021
Publication title -
transactions on emerging telecommunications technologies
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.366
H-Index - 47
ISSN - 2161-3915
DOI - 10.1002/ett.3872
Subject(s) - recommender system , computer science , collaborative filtering , robustness (evolution) , transferability , matrix decomposition , euclidean distance , data mining , machine learning , artificial intelligence , biochemistry , chemistry , eigenvalues and eigenvectors , physics , logit , quantum mechanics , gene
Nowadays, collaborative filtering recommender systems have been widely deployed in many commercial companies to make profit. Neighborhood‐based collaborative filtering (CF) is common and effective. To date, despite its effectiveness, there has been little effort to explore their robustness and the impact of data poisoning attacks on their performance. Can the neighborhood‐based recommender systems be easily fooled? To this end, we shed light on the robustness of neighborhood‐based recommender systems and propose a novel data poisoning attack framework, encoding the purpose of attack and constraint against them. We first illustrate how to calculate the optimal data poisoning attack, namely, UNAttack. We inject a few well‐designed fake users into the recommender systems such that target items will be recommended to as many normal users as possible. Extensive experiments are conducted on three real‐world datasets to validate the effectiveness and the transferability of our proposed method. In addition, some interesting phenomena can be found. For example, (i) neighborhood‐based recommender systems with Euclidean distance‐based similarity have strong robustness and (ii) the fake users can be transferred to attack the state‐of‐the‐art CF recommender systems such as neural CF and Bayesian personalized ranking matrix factorization.