Abstract:Recommender systems can effectively improve user experience, but they are vulnerable to shilling attacks due to their open nature. Attackers inject fake user profiles to destroy the security and reliability of the recommender systems. Therefore, it is crucial to detect shilling attacks effectively. The primitive detection models are feasible but costly because of the dependence on plenty of hand-engineered explicit features based on statistical measures. Even though the upgraded models based on learning embeddings of the implicit features are more general, they fail to take some distinct features in distinguishing fake users into consideration. Moreover, these primitive and upgraded models are difficult to capture the high order relationships between users and items as the models usually learn the embedding from the first-order interactions. The representation and similarity information learned from the first-order interactions are not comprehensive enough, limiting the detection task. To this end, we propose a novel shilling attack detection model by fusing hypergraph spectral features (SpDetector). The proposed model combines the explicit and implicit features to balance the effectiveness and generality and deal with the high order relationships by hypergraphs-based embedding. From the implicit perspective, SpDetector constructs user hypergraphs and item hypergraphs for the high-order relationships hidden in the interaction and extracts spectral features from hypergraphs to capture high-order similarity for users and items, respectively. From the explicit perspective, it extracts two kinds of explicit features: item similarity offsets (ISO) based on item spectral features and rating prediction errors (RPE), for all users as their distinct capability of distinguishing fake users. Finally, the SpDetector learns to distinguish fake users by training a deep neural network with those features. Experiments conducted on MovieLens and Amazon datasets show that SpDetector outperforms state-of-the-art detection models.

Experimental and Theoretical Study for the Popular Shilling Attacks Detection Methods in Collaborative Recommender System

Shilling Attacks Detection in Recommender Systems Based on Target Item Analysis

Detection of Shilling Attacks in Collaborative Filtering Recommender Systems.

An AP-Based Shilling Attack Detector for Collaborative Filtering Recommendation Systems

Collaborative Computing: Networking, Applications and Worksharing

Finding Shilling Attack in Recommender System Based on Dynamic Feature Selection

Hybrid convolutional neural network (CNN) and long-short term memory (LSTM) based deep learning model for detecting shilling attack in the social-aware network

An Unsupervised Algorithm for Detecting Shilling Attacks on Recommender Systems

Hybrid gated recurrent unit and convolutional neural network-based deep learning mechanism for efficient shilling attack detection in social networks

An Outlier Degree Shilling Attack Detection Algorithm Based on Dynamic Feature Selection

Shilling attack detection for recommender systems based on credibility of group users and rating time series

Unsupervised contaminated user profile identification against shilling attack in recommender system

HySAD: a semi-supervised hybrid shilling attack detector for trustworthy product recommendation.

Unsupervised Strategies for Shilling Attack Detection in Recommender System

A novel clustered-based detection method for shilling attack in private environments

Shilling Attack Based on Item Popularity and Rated Item Correlation Against Collaborative Filtering

An unsupervised detection method for shilling attacks based on deep learning and community detection

Advancing Recommender Systems by mitigating Shilling attacks

Detecting shilling profiles in collaborative recommender systems via multidimensional profile temporal features

Fusing hypergraph spectral features for shilling attack detection

Poisoning Deep Learning Based Recommender Model in Federated Learning Scenarios.