Abstract:Recommender systems can effectively improve user experience, but they are vulnerable to shilling attacks due to their open nature. Attackers inject fake user profiles to destroy the security and reliability of the recommender systems. Therefore, it is crucial to detect shilling attacks effectively. The primitive detection models are feasible but costly because of the dependence on plenty of hand-engineered explicit features based on statistical measures. Even though the upgraded models based on learning embeddings of the implicit features are more general, they fail to take some distinct features in distinguishing fake users into consideration. Moreover, these primitive and upgraded models are difficult to capture the high order relationships between users and items as the models usually learn the embedding from the first-order interactions. The representation and similarity information learned from the first-order interactions are not comprehensive enough, limiting the detection task. To this end, we propose a novel shilling attack detection model by fusing hypergraph spectral features (SpDetector). The proposed model combines the explicit and implicit features to balance the effectiveness and generality and deal with the high order relationships by hypergraphs-based embedding. From the implicit perspective, SpDetector constructs user hypergraphs and item hypergraphs for the high-order relationships hidden in the interaction and extracts spectral features from hypergraphs to capture high-order similarity for users and items, respectively. From the explicit perspective, it extracts two kinds of explicit features: item similarity offsets (ISO) based on item spectral features and rating prediction errors (RPE), for all users as their distinct capability of distinguishing fake users. Finally, the SpDetector learns to distinguish fake users by training a deep neural network with those features. Experiments conducted on MovieLens and Amazon datasets show that SpDetector outperforms state-of-the-art detection models.

Analysis of Shilling Attacks on SVD-based Collaborative Filtering Algorithm

Shilling Attacks Detection in Recommender Systems Based on Target Item Analysis

Advancing Recommender Systems by mitigating Shilling attacks

Shilling attack detection for recommender systems based on credibility of group users and rating time series

Experimental and Theoretical Study for the Popular Shilling Attacks Detection Methods in Collaborative Recommender System

A novel clustered-based detection method for shilling attack in private environments

Statistical Attack Detection

Attacking Recommender Systems with Augmented User Profiles

Recommendation with Item Clustering Based Collaborative Filtering

Incorporating Community Detection and Clustering Techniques into Collaborative Filtering Model

Shilling Detection Algorithm Based on Non-Negative User Embedding Matrix Factorization

Single-User Injection for Invisible Shilling Attack against Recommender Systems

A genre trust model for defending shilling attacks in recommender systems

Catch the Black Sheep: Unified Framework for Shilling Attack Detection Based on Fraudulent Action Propagation.

Anti-FakeU: Defending Shilling Attacks on Graph Neural Network Based Recommender Model

Fusing hypergraph spectral features for shilling attack detection

Detecting shilling profiles in collaborative recommender systems via multidimensional profile temporal features

Shilling Black-Box Recommender Systems by Learning to Generate Fake User Profiles

HySAD: a semi-supervised hybrid shilling attack detector for trustworthy product recommendation.

Data Poisoning Attacks on Factorization-Based Collaborative Filtering

Enhancing the Robustness of Neural Collaborative Filtering Systems under Malicious Attacks