Practical Cross-System Shilling Attacks with Limited Access to Data
In shilling attacks, an adversarial party injects a few fake user profiles into a Recommender System (RS) so that the target item can be promoted or demoted. Although much effort has been devoted to developing shilling attack methods, we find that existing approaches are still far from practical. In this paper, we analyze the properties a practical shilling attack method should have and propose a new concept of Cross-system Attack. With the idea of Cross-system Attack, we design a Practical Cross-system Shilling Attack (PC-Attack) framework that requires little information about the victim RS model and the target RS data for conducting attacks. PC-Attack is trained to capture graph topology knowledge from public RS data in a self-supervised manner. Then, it is fine-tuned on a small portion of target data that is easy to access to construct fake profiles. Extensive experiments have demonstrated the superiority of PC-Attack over state-of-the-art baselines. Our implementation of PC-Attack is available at https://github.com/KDEGroup/PC-Attack.
Code (1)
Tasks
Recommendation SystemsSimilar Papers 제목 키워드 기반
Single-User Injection for Invisible Shilling Attack against Recommender Systems
Recommendation systems (RS) are crucial for alleviating the information overload problem. Due to its pivotal role in guiding users to make decisions, unscrupulous parties are lured to launch attacks against RS to affect …
Recommendation SystemsWho is Really Affected by Fraudulent Reviews? An analysis of shilling attacks on recommender systems in real-world scenarios
We present the results of an initial analysis conducted on a real-life setting to quantify the effect of shilling attacks on recommender systems. We focus on both algorithm performance as well as the types of users who a…
Recommendation SystemsAdvancing Recommender Systems by mitigating Shilling attacks
Considering the premise that the number of products offered grow in an exponential fashion and the amount of data that a user can assimilate before making a decision is relatively small, recommender systems help in categ…
Collaborative FilteringRecommendation SystemsLLM-Based User Simulation for Low-Knowledge Shilling Attacks on Recommender Systems
Recommender systems (RS) are increasingly vulnerable to shilling attacks, where adversaries inject fake user profiles to manipulate system outputs. Traditional attack strategies often rely on simplistic heuristics, requi…
Language ModelingLanguage ModellingLarge Language ModelRecommendation Systems+2Ready for Emerging Threats to Recommender Systems? A Graph Convolution-based Generative Shilling Attack
To explore the robustness of recommender systems, researchers have proposed various shilling attack models and analyzed their adverse effects. Primitive attacks are highly feasible but less effective due to simplistic ha…
Generative Adversarial NetworkRecommendation Systems