Abstract:The rise of online social networks has facilitated the evolution of social recommender systems, which incorporate social relations to enhance users' decision-making process. With the great success of Graph Neural Networks (GNNs) in learning node representations, GNN-based social recommendations have been widely studied to model user-item interactions and user-user social relations simultaneously. Despite their great successes, recent studies have shown that these advanced recommender systems are highly vulnerable to adversarial attacks, in which attackers can inject well-designed fake user profiles to disrupt recommendation performances. While most existing studies mainly focus on argeted attacks to promote target items on vanilla recommender systems, untargeted attacks to degrade the overall prediction performance are less explored on social recommendations under a black-box scenario. To perform untargeted attacks on social recommender systems, attackers can construct malicious social relationships for fake users to enhance the attack performance. However, the coordination of social relations and item profiles is challenging for attacking black-box social recommendations. To address this limitation, we first conduct several preliminary studies to demonstrate the effectiveness of cross-community connections and cold-start items in degrading recommendations performance. Specifically, we propose a novel framework MultiAttack based on multi-agent reinforcement learning to coordinate the generation of cold-start item profiles and cross-community social relations for conducting untargeted attacks on black-box social recommendations. Comprehensive experiments on various real-world datasets demonstrate the effectiveness of our proposed attacking framework under the black-box setting.

Enhancing the Robustness of Neural Collaborative Filtering Systems under Malicious Attacks

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Training Robust Deep Collaborative Filtering Models Via Adversarial Noise Propagation

Robust enhanced collaborative filtering without explicit noise filtering

Poisoning Deep Learning Based Recommender Model in Federated Learning Scenarios.

Adversarial Robustness of Deep Reinforcement Learning based Dynamic Recommender Systems

Multi-agent Attacks for Black-box Social Recommendations

Improving Model Robustness Against Adversarial Examples with Redundant Fully Connected Layer.

On the resilience of Collaborative Learning-based Recommender Systems Against Community Detection Attack

On the Vulnerability of Graph Learning-based Collaborative Filtering.

Data Poisoning Attacks on Factorization-Based Collaborative Filtering

Toward Robust Recommendation via Real-time Vicinal Defense

Towards Adversarially Robust Recommendation from Adaptive Fraudster Detection

Knowledge-enhanced Black-box Attacks for Recommendations

Anti-FakeU: Defending Shilling Attacks on Graph Neural Network Based Recommender Model

Securing Recommender System via Cooperative Training

Poison-Tolerant Collaborative Filtering Against Poisoning Attacks on Recommender Systems

Robust Federated Recommendation System

Enhancing the Transferability of Adversarial Examples Based on Nesterov Momentum for Recommendation Systems

Data Poisoning Attacks to Deep Learning Based Recommender Systems

Adversarial Attacks and Detection on Reinforcement Learning-Based Interactive Recommender Systems