Evaluating Impact of User-Cluster Targeted Attacks in Matrix Factorisation Recommenders
In practice, users of a Recommender System (RS) fall into a few clusters based on their preferences. In this work, we conduct a systematic study on user-cluster targeted data poisoning attacks on Matrix Factorisation (MF) based RS, where an adversary injects fake users with falsely crafted user-item feedback to promote an item to a specific user cluster. We analyse how user and item feature matrices change after data poisoning attacks and identify the factors that influence the effectiveness of the attack on these feature matrices. We demonstrate that the adversary can easily target specific user clusters with minimal effort and that some items are more susceptible to attacks than others. Our theoretical analysis has been validated by the experimental results obtained from two real-world datasets. Our observations from the study could serve as a motivating point to design a more robust RS.
Code (0)
등록된 구현이 없습니다.
Tasks
Data PoisoningRecommendation SystemsSimilar Papers 제목 키워드 기반
Untargeted Attack against Federated Recommendation Systems via Poisonous Item Embeddings and the Defense
Federated recommendation (FedRec) can train personalized recommenders without collecting user data, but the decentralized nature makes it susceptible to poisoning attacks. Most previous studies focus on the targeted atta…
Contrastive LearningRecommendation SystemsRecent improvements of ASR models in the face of adversarial attacks
Like many other tasks involving neural networks, Speech Recognition models are vulnerable to adversarial attacks. However recent research has pointed out differences between attacks and defenses on ASR models compared to…
speech-recognitionSpeech RecognitionEvaluating Adversarial Robustness on Document Image Classification
Adversarial attacks and defenses have gained increasing interest on computer vision systems in recent years, but as of today, most investigations are limited to images. However, many artificial intelligence models actual…
Adversarial AttackAdversarial RobustnessClassificationdocument-image-classification+4Targeted Attacks on Timeseries Forecasting
Real-world deep learning models developed for Time Series Forecasting are used in several critical applications ranging from medical devices to the security domain. Many previous works have shown how deep learning models…
Adversarial AttackTime SeriesTime Series AnalysisTime Series ForecastingProvable Defense Against Clustering Attacks on 3D Point Clouds
Lately, the literature on adversarial robustness spans from images to other domains such as point clouds. In this work, we consider clustering attacks on 3D point clouds and devise a provable defense mechanism to counter…
Adversarial RobustnessClustering