{"id":"https://openalex.org/W7225424550","doi":"https://doi.org/10.1145/3861000","title":"Target User Attack on Federated Recommender Systems with Proxy Items and Its Countermeasure","display_name":"Target User Attack on Federated Recommender Systems with Proxy Items and Its Countermeasure","publication_year":2026,"publication_date":"2026-11-06","ids":{"openalex":"https://openalex.org/W7225424550","doi":"https://doi.org/10.1145/3861000"},"language":"en","primary_location":{"id":"doi:10.1145/3861000","doi":"https://doi.org/10.1145/3861000","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3861000","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3861000?download=true","source":{"id":"https://openalex.org/S4394735545","display_name":"ACM Transactions on Information Systems","issn_l":"1046-8188","issn":["1046-8188","1558-2868"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["abdc-c","anvur-class-a","anvur-scientific","ccf-a","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information Systems","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3861000?download=true","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041122912","display_name":"Dongyi Zheng","orcid":"https://orcid.org/0009-0007-7541-9999","observed_orcids":["https://orcid.org/0009-0007-7541-9999"]},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongyi Zheng","raw_affiliation_strings":["Sun Yat-sen University, Pengcheng Laboratory, China"],"raw_orcid":"https://orcid.org/0009-0007-7541-9999","affiliations":[{"raw_affiliation_string":"Sun Yat-sen University, Pengcheng Laboratory, China","institution_ids":["https://openalex.org/I157773358","https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100702888","display_name":"Lingzhi Wang","orcid":"https://orcid.org/0000-0002-1346-2437","observed_orcids":["https://orcid.org/0000-0002-1346-2437","https://orcid.org/0009-0003-6509-3383"]},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingzhi Wang","raw_affiliation_strings":["Harbin Institute of Technology (Shenzhen), China"],"raw_orcid":"https://orcid.org/0000-0002-1346-2437","affiliations":[{"raw_affiliation_string":"Harbin Institute of Technology (Shenzhen), China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005770787","display_name":"Jiyuan Feng","orcid":"https://orcid.org/0000-0003-3052-6516","observed_orcids":["https://orcid.org/0000-0003-3052-6516"]},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiyuan Feng","raw_affiliation_strings":["Pengcheng Laboratory, Harbin Institute of Technology (Shenzhen), China"],"raw_orcid":"https://orcid.org/0000-0003-3052-6516","affiliations":[{"raw_affiliation_string":"Pengcheng Laboratory, Harbin Institute of Technology (Shenzhen), China","institution_ids":["https://openalex.org/I204983213","https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023918894","display_name":"Yonghong Tian","orcid":"https://orcid.org/0000-0002-2978-5935","observed_orcids":["https://orcid.org/0000-0002-2978-5935"]},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yonghong Tian","raw_affiliation_strings":["Peking University, Pengcheng Laboratory, China"],"raw_orcid":"https://orcid.org/0000-0002-2978-5935","affiliations":[{"raw_affiliation_string":"Peking University, Pengcheng Laboratory, China","institution_ids":["https://openalex.org/I20231570","https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023506057","display_name":"Nong Xiao","orcid":"https://orcid.org/0000-0002-2166-977X","observed_orcids":["https://orcid.org/0000-0002-2166-977X"]},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nong Xiao","raw_affiliation_strings":["Sun Yat-sen University, China"],"raw_orcid":"https://orcid.org/0000-0002-2166-977X","affiliations":[{"raw_affiliation_string":"Sun Yat-sen University, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069241620","display_name":"Qing Liao","orcid":"https://orcid.org/0000-0003-1012-5301","observed_orcids":["https://orcid.org/0000-0003-1012-5301"]},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qing Liao","raw_affiliation_strings":["Pengcheng Laboratory, Harbin Institute of Technology (Shenzhen), China"],"raw_orcid":"https://orcid.org/0000-0003-1012-5301","affiliations":[{"raw_affiliation_string":"Pengcheng Laboratory, Harbin Institute of Technology (Shenzhen), China","institution_ids":["https://openalex.org/I204983213","https://openalex.org/I4210136793"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10203","display_name":"Recommender Systems and Techniques","score":0.9042999744415283,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10203","display_name":"Recommender Systems and Techniques","score":0.9042999744415283,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.08020000159740448,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.010099999606609344,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-recommender-systems","display_name":"federated recommender systems","score":0.9750000238418579},{"id":"https://openalex.org/keywords/attack-stealthiness","display_name":"attack stealthiness","score":0.8759999871253967},{"id":"https://openalex.org/keywords/defense-mechanisms","display_name":"defense mechanisms","score":0.5870000123977661}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8852999806404114},{"id":"https://openalex.org/C2780148112","wikidata":"https://www.wikidata.org/wiki/Q1432581","display_name":"Proxy (statistics)","level":2,"score":0.6601999998092651},{"id":"https://openalex.org/C2778738651","wikidata":"https://www.wikidata.org/wiki/Q16546687","display_name":"Novelty","level":2,"score":0.6220999956130981},{"id":"https://openalex.org/C557471498","wikidata":"https://www.wikidata.org/wiki/Q554950","display_name":"Recommender system","level":2,"score":0.6003000140190125},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5504000186920166},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.49779999256134033},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4307999908924103},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.41819998621940613},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.41609999537467957},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.3978999853134155},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3702000081539154},{"id":"https://openalex.org/C2984870255","wikidata":"https://www.wikidata.org/wiki/Q5196451","display_name":"User engagement","level":2,"score":0.3693000078201294},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.3549000024795532},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.33149999380111694},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.3095000088214874},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.29030001163482666},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2752000093460083},{"id":"https://openalex.org/C2776861820","wikidata":"https://www.wikidata.org/wiki/Q7252899","display_name":"Proxy re-encryption","level":4,"score":0.2676999866962433},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2669000029563904},{"id":"https://openalex.org/C86037889","wikidata":"https://www.wikidata.org/wiki/Q4330127","display_name":"Learning to rank","level":3,"score":0.25850000977516174},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.25200000405311584}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3861000","doi":"https://doi.org/10.1145/3861000","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3861000","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3861000?download=true","source":{"id":"https://openalex.org/S4394735545","display_name":"ACM Transactions on Information Systems","issn_l":"1046-8188","issn":["1046-8188","1558-2868"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["abdc-c","anvur-class-a","anvur-scientific","ccf-a","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3861000","doi":"https://doi.org/10.1145/3861000","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3861000","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3861000?download=true","source":{"id":"https://openalex.org/S4394735545","display_name":"ACM Transactions on Information Systems","issn_l":"1046-8188","issn":["1046-8188","1558-2868"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["abdc-c","anvur-class-a","anvur-scientific","ccf-a","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-1","vabb-shw"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225424550.pdf","grobid_xml":"https://content.openalex.org/works/W7225424550.grobid-xml"},"referenced_works_count":46,"referenced_works":["https://openalex.org/W1565176583","https://openalex.org/W2605350416","https://openalex.org/W2740920897","https://openalex.org/W2744999500","https://openalex.org/W2766585573","https://openalex.org/W2913777072","https://openalex.org/W2963367478","https://openalex.org/W2964121744","https://openalex.org/W2967481075","https://openalex.org/W2990595670","https://openalex.org/W3012794253","https://openalex.org/W3034790665","https://openalex.org/W3064112253","https://openalex.org/W3081273427","https://openalex.org/W3119520312","https://openalex.org/W3127173367","https://openalex.org/W3133706083","https://openalex.org/W3169162967","https://openalex.org/W3171665710","https://openalex.org/W3217045679","https://openalex.org/W4223925960","https://openalex.org/W4224235315","https://openalex.org/W4224942092","https://openalex.org/W4226021524","https://openalex.org/W4226493408","https://openalex.org/W4290944580","https://openalex.org/W4296591849","https://openalex.org/W4306789986","https://openalex.org/W4315783855","https://openalex.org/W4321327777","https://openalex.org/W4376132596","https://openalex.org/W4382239710","https://openalex.org/W4383559238","https://openalex.org/W4384655702","https://openalex.org/W4384655830","https://openalex.org/W4387868958","https://openalex.org/W4389258307","https://openalex.org/W4391262214","https://openalex.org/W4396757545","https://openalex.org/W4398169514","https://openalex.org/W4400528616","https://openalex.org/W4402307441","https://openalex.org/W4404739159","https://openalex.org/W4405319402","https://openalex.org/W4408733574","https://openalex.org/W4412898685"],"related_works":["https://openalex.org/W4382239710","https://openalex.org/W4402351952","https://openalex.org/W7143471810","https://openalex.org/W4405184271","https://openalex.org/W4412898685","https://openalex.org/W4403919398","https://openalex.org/W4384655830","https://openalex.org/W4226021524","https://openalex.org/W4416063105","https://openalex.org/W4226493408"],"abstract_inverted_index":{"The":[0,99],"decentralized":[1],"nature":[2],"of":[3,28,119],"federated":[4],"recommender":[5],"systems":[6],"(FedRecs)":[7],"introduces":[8],"new":[9],"security":[10],"risks,":[11],"particularly":[12],"target":[13,29,41,88,106,158],"item":[14,42,89,107,124,131],"promotion":[15],"attacks,":[16],"where":[17],"attackers":[18],"may":[19],"attempt":[20],"to":[21,44,90,103],"manipulate":[22],"the":[23,177],"ranking":[24],"and":[25,138,142,154,173],"exposure":[26],"rate":[27],"items":[30,150],"in":[31,57,199],"users\u2019":[32],"recommendation":[33],"results.":[34],"However,":[35],"existing":[36],"attacks":[37],"typically":[38],"promote":[39],"each":[40,87,105,152,157],"broadly":[43],"all":[45,97],"users,":[46],"which":[47,84,128,147],"will":[48],"compromise":[49],"attack":[50,139,145,171],"stealthiness":[51],"while":[52],"yielding":[53],"only":[54],"marginal":[55],"gains":[56],"effectiveness.":[58],"To":[59,175],"address":[60],"these":[61],"issues,":[62],"we":[63,183],"propose":[64],"a":[65,76,91,109,186],"novel":[66],"pro":[67],"xy-":[68],"it":[69],"em":[70],"based":[71,189],"t":[72],"arget":[73],"u":[74],"ser":[75],"ttack":[77],"method":[78],"on":[79,190,203],"FedRecs,":[80],"called":[81],"ProitTUA":[82,117,168],",":[83],"selectively":[85],"promotes":[86],"relevant":[92,110],"user":[93,111],"group":[94,112],"rather":[95],"than":[96],"users.":[98],"key":[100,121],"novelty":[101],"is":[102],"associate":[104],"with":[108,161],"via":[113],"category-wise":[114],"proxy":[115,149],"items.":[116],"consists":[118],"two":[120],"stages:":[122],"(1)":[123],"latent":[125,130],"category":[126,153],"inference,":[127],"infers":[129],"categories":[132],"by":[133,181],"leveraging":[134],"auxiliary":[135],"domain":[136,140],"modeling":[137],"adaptation;":[141],"(2)":[143],"proxy-item-based":[144],"construction,":[146],"identifies":[148],"for":[151],"then":[155],"aligns":[156],"item's":[159],"embedding":[160],"its":[162,197],"corresponding":[163],"proxies.":[164],"Extensive":[165],"experiments":[166],"show":[167],"achieves":[169],"superior":[170],"effectiveness":[172,198],"stealthiness.":[174],"mitigate":[176],"potential":[178],"threat":[179],"posed":[180],"ProitTUA,":[182],"further":[184],"design":[185],"defense":[187],"mechanism":[188],"gradient":[191],"dynamics":[192],"analysis.":[193],"Experimental":[194],"results":[195],"demonstrate":[196],"reducing":[200],"ProitTUA's":[201],"impact":[202],"FedRecs.":[204]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-11-07T00:00:00"}