Abstract:Recommendation systems (RS) are crucial for alleviating the information overload problem. Due to its pivotal role in guiding users to make decisions, unscrupulous parties are lured to launch attacks against RS to affect the decisions of normal users and gain illegal profits. Among various types of attacks, shilling attack is one of the most subsistent and profitable attacks. In shilling attack, an adversarial party injects a number of well-designed fake user profiles into the system to mislead RS so that the attack goal can be achieved. Although existing shilling attack methods have achieved promising results, they all adopt the attack paradigm of multi-user injection, where some fake user profiles are required. This paper provides the first study of shilling attack in an extremely limited scenario: only one fake user profile is injected into the victim RS to launch shilling attacks (i.e., single-user injection). We propose a novel single-user injection method SUI-Attack for invisible shilling attack. SUI-Attack is a graph based attack method that models shilling attack as a node generation task over the user-item bipartite graph of the victim RS, and it constructs the fake user profile by generating user features and edges that link the fake user to items. Extensive experiments demonstrate that SUI-Attack can achieve promising attack results in single-user injection. In addition to its attack power, SUI-Attack increases the stealthiness of shilling attack and reduces the risk of being detected. We provide our implementation at: <a class="link-external link-https" href="https://github.com/KDEGroup/SUI-Attack" rel="external noopener nofollow">this https URL</a>.

Shilling Black-box Review-based Recommender Systems through Fake Review Generation

Shilling Black-Box Recommender Systems by Learning to Generate Fake User Profiles

Attacking Recommender Systems with Augmented User Profiles

Review-Incorporated Model-Agnostic Profile Injection Attacks on Recommender Systems

Gray-Box Shilling Attack: An Adversarial Learning Approach

Analyzing and Detecting Adversarial Spam on a Large-scale Online APP Review System.

Catch the Black Sheep: Unified Framework for Shilling Attack Detection Based on Fraudulent Action Propagation.

Advancing Recommender Systems by mitigating Shilling attacks

Automated Crowdturfing Attacks and Defenses in Online Review Systems

Ready for Emerging Threats to Recommender Systems? A Graph Convolution-based Generative Shilling Attack

A Black-Box Attack Model for Visually-Aware Recommender Systems

Shilling Attack Based on Item Popularity and Rated Item Correlation Against Collaborative Filtering

Single-User Injection for Invisible Shilling Attack against Recommender Systems

Shilling Attacks Detection in Recommender Systems Based on Target Item Analysis

Shilling attack detection for recommender systems based on credibility of group users and rating time series

Reliable Fake Review Detection Via Modeling Temporal and Behavioral Patterns

Unsupervised Strategies for Shilling Attack Detection in Recommender System

Detection of Shilling Attacks in Collaborative Filtering Recommender Systems.

An AP-Based Shilling Attack Detector for Collaborative Filtering Recommendation Systems

The Role of Fake Users in Sequential Recommender Systems

Attacking Recommender Systems With Plausible Profile