Abstract:The stability and reliability of filtration and recommender systems are crucial for continuous operation. The presence of fake profiles, known as “shilling attacks,” can undermine the reliability of these systems. Therefore, it is important to detect and classify these attacks. Numerous techniques for detecting shilling attacks have been proposed, including supervised, semi-supervised, unsupervised, Deep Learning, and hyper deep learning methods. These techniques utilize well-known shilling attack models to target collaborative recommender systems. While previous research has focused on evaluating shilling attack strategies from a global perspective, considering factors such as attack size and attacker’s knowledge, there is a lack of comparative studies on the various existing and commonly used attack detection methods. This paper aims to fill this gap by providing a comprehensive survey of shilling attack models, detection attributes, and detection algorithms. Furthermore, we explore the traits of injected profiles that are exploited by detection algorithms, which has not been thoroughly investigated in prior works. We also conduct experimental studies on popular attack detection methods. Our experimental results reveal that hybrid deep learning algorithms exhibit the highest performance in shilling detection, followed by supervised learning algorithms and semi-supervised learning algorithms. In contrast, the unsupervised technique performs poorly. The deep learning-based Shilling Attack Detection demonstrates accuracy and quality in accurately identifying a variety of mixed attacks. This study provides valuable insights into shilling attack models, detection attributes, and detection algorithms. Our findings highlight the superior performance of hybrid deep learning algorithms in shilling detection, as well as the limitations of unsupervised techniques. Deep learning-based Shilling Attack Detection showcases its effectiveness and accuracy in identifying various types of attacks.

A hybrid decision approach to detect profile injection attacks in collaborative recommender systems

A Hybrid Recommendation Algorithm Based on Clustering and Collaborative Filtering

Poisoning Deep Learning Based Recommender Model in Federated Learning Scenarios.

FedRecAttack: Model Poisoning Attack to Federated Recommendation

Review-Incorporated Model-Agnostic Profile Injection Attacks on Recommender Systems

IMPACT ANALYSIS OF PROFILE INJECTION ATTACKS IN RECOMMENDER SYSTEM

Shilling Attacks Detection in Recommender Systems Based on Target Item Analysis

Revisiting Adversarially Learned Injection Attacks Against Recommender Systems

Statistical Attack Detection

Detecting shilling profiles in collaborative recommender systems via multidimensional profile temporal features

Defending Substitution-Based Profile Pollution Attacks on Sequential Recommenders

Experimental and Theoretical Study for the Popular Shilling Attacks Detection Methods in Collaborative Recommender System

Data Poisoning Attacks to Deep Learning Based Recommender Systems

Influence-Driven Data Poisoning for Robust Recommender Systems

HySAD: a semi-supervised hybrid shilling attack detector for trustworthy product recommendation.

Attacking Recommender Systems with Augmented User Profiles

Hybrid Recommendation Model Based on Social Media and Social Networks

Re-scale AdaBoost for attack detection in collaborative filtering recommender systems

Single-User Injection for Invisible Shilling Attack against Recommender Systems

Collaborative filtering recommendation algorithm based on multi-level hybrid similarity

Attacking Black-box Recommendations via Copying Cross-domain User Profiles