{"id":"https://openalex.org/W2990338521","doi":"https://doi.org/10.1109/tifs.2019.2954737","title":"Understanding the Manipulation on Recommender Systems through Web Injection","display_name":"Understanding the Manipulation on Recommender Systems through Web Injection","publication_year":2019,"publication_date":"2019-11-20","ids":{"openalex":"https://openalex.org/W2990338521","doi":"https://doi.org/10.1109/tifs.2019.2954737","mag":"2990338521"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2019.2954737","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2019.2954737","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100626054","display_name":"Yubao Zhang","orcid":"https://orcid.org/0000-0002-1421-4072"},"institutions":[{"id":"https://openalex.org/I86501945","display_name":"University of Delaware","ror":"https://ror.org/01sbq1a82","country_code":"US","type":"education","lineage":["https://openalex.org/I86501945"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yubao Zhang","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Delaware, Newark, USA","Department of Electrical and Computer Engineering, University of Delaware, Newark, DE, USA#TAB#"],"raw_orcid":"https://orcid.org/0000-0002-1421-4072","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Delaware, Newark, USA","institution_ids":["https://openalex.org/I86501945"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Delaware, Newark, DE, USA#TAB#","institution_ids":["https://openalex.org/I86501945"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076503447","display_name":"Jidong Xiao","orcid":"https://orcid.org/0000-0001-6807-9999"},"institutions":[{"id":"https://openalex.org/I120156002","display_name":"Boise State University","ror":"https://ror.org/02e3zdp86","country_code":"US","type":"education","lineage":["https://openalex.org/I120156002"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jidong Xiao","raw_affiliation_strings":["Department of Computer Science, Boise State University, Boise, USA","Department of Computer Science, Boise State University, Boise, ID, USA"],"raw_orcid":"https://orcid.org/0000-0001-6807-9999","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Boise State University, Boise, USA","institution_ids":["https://openalex.org/I120156002"]},{"raw_affiliation_string":"Department of Computer Science, Boise State University, Boise, ID, USA","institution_ids":["https://openalex.org/I120156002"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101933593","display_name":"Shuai Hao","orcid":"https://orcid.org/0000-0001-7483-5252"},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shuai Hao","raw_affiliation_strings":["Center for Cyber Security Education and Research, Old Dominion University, Norfolk, USA","Department of Computer Science, Old Dominion University, Norfolk, USA","Dept. of Comput Sci., Old Dominion Univ., Norfolk, VA, USA"],"raw_orcid":"https://orcid.org/0000-0001-7483-5252","affiliations":[{"raw_affiliation_string":"Center for Cyber Security Education and Research, Old Dominion University, Norfolk, USA","institution_ids":["https://openalex.org/I81365321"]},{"raw_affiliation_string":"Department of Computer Science, Old Dominion University, Norfolk, USA","institution_ids":["https://openalex.org/I81365321"]},{"raw_affiliation_string":"Dept. of Comput Sci., Old Dominion Univ., Norfolk, VA, USA","institution_ids":["https://openalex.org/I81365321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100664241","display_name":"Haining Wang","orcid":"https://orcid.org/0000-0002-9665-7511"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haining Wang","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Virginia Tech, Arlington, USA","Department of Electrical and Computer Engineering, Virginia Tech, Arlington, VA, USA"],"raw_orcid":"https://orcid.org/0000-0002-9665-7511","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Virginia Tech, Arlington, USA","institution_ids":["https://openalex.org/I859038795"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Virginia Tech, Arlington, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101952501","display_name":"Sencun Zhu","orcid":"https://orcid.org/0000-0002-1047-7967"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sencun Zhu","raw_affiliation_strings":["Department of Computer Science and Engineering, Penn State University, University Park, USA","[Dept. of Comput. Sci. & Eng., Penn State Univ., University Park, PA, USA]"],"raw_orcid":"https://orcid.org/0000-0002-1047-7967","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Penn State University, University Park, USA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"[Dept. of Comput. Sci. & Eng., Penn State Univ., University Park, PA, USA]","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010727123","display_name":"Sushil Jajodia","orcid":"https://orcid.org/0000-0003-3210-558X"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sushil Jajodia","raw_affiliation_strings":["Center for Secure Information Systems, George Mason University, Fairfax, USA","[Center for secure Information Systems, George Mason University, Fairfax, VA, USA]"],"raw_orcid":"https://orcid.org/0000-0003-3210-558X","affiliations":[{"raw_affiliation_string":"Center for Secure Information Systems, George Mason University, Fairfax, USA","institution_ids":["https://openalex.org/I162714631"]},{"raw_affiliation_string":"[Center for secure Information Systems, George Mason University, Fairfax, VA, USA]","institution_ids":["https://openalex.org/I162714631"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.3044,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.91715358,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"15","issue":null,"first_page":"3807","last_page":"3818"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10203","display_name":"Recommender Systems and Techniques","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.728336751461029},{"id":"https://openalex.org/keywords/recommender-system","display_name":"Recommender system","score":0.6583089828491211},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.6087509989738464},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.507733941078186},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.46513882279396057},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.41943520307540894}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.728336751461029},{"id":"https://openalex.org/C557471498","wikidata":"https://www.wikidata.org/wiki/Q554950","display_name":"Recommender system","level":2,"score":0.6583089828491211},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.6087509989738464},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.507733941078186},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.46513882279396057},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.41943520307540894}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2019.2954737","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2019.2954737","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:scholarworks.boisestate.edu:cs_facpubs-1392","is_oa":false,"landing_page_url":"https://scholarworks.boisestate.edu/cs_facpubs/384","pdf_url":null,"source":{"id":"https://openalex.org/S4377196366","display_name":"Scholar Works  (Boise State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I120156002","host_organization_name":"Boise State University","host_organization_lineage":["https://openalex.org/I120156002"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computer Science Faculty Publications and Presentations","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.8100000023841858,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G18332213","display_name":null,"funder_award_id":"W911NF-19-1-0049","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G6471190695","display_name":null,"funder_award_id":"W911NF-13-1-0421","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G676520704","display_name":null,"funder_award_id":"CNS-1822094","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6795819195","display_name":null,"funder_award_id":"CNS-1618117","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W33808135","https://openalex.org/W1480813933","https://openalex.org/W1488267921","https://openalex.org/W1493526108","https://openalex.org/W1969347587","https://openalex.org/W1977290284","https://openalex.org/W1989279326","https://openalex.org/W2017281925","https://openalex.org/W2025605741","https://openalex.org/W2040367556","https://openalex.org/W2042281163","https://openalex.org/W2052602449","https://openalex.org/W2054141820","https://openalex.org/W2072978486","https://openalex.org/W2075807628","https://openalex.org/W2082182279","https://openalex.org/W2100370943","https://openalex.org/W2101234009","https://openalex.org/W2109056062","https://openalex.org/W2123147099","https://openalex.org/W2127480961","https://openalex.org/W2155106456","https://openalex.org/W2159094788","https://openalex.org/W2164716162","https://openalex.org/W2512971201","https://openalex.org/W2613314732","https://openalex.org/W2733075145","https://openalex.org/W2733681384","https://openalex.org/W2766251443","https://openalex.org/W2793272611","https://openalex.org/W2809712156","https://openalex.org/W6601358898","https://openalex.org/W6675354045","https://openalex.org/W6740744476"],"related_works":["https://openalex.org/W1488511360","https://openalex.org/W1781894645","https://openalex.org/W2894902932","https://openalex.org/W569715723","https://openalex.org/W188332989","https://openalex.org/W2982387199","https://openalex.org/W2106946048","https://openalex.org/W2000745862","https://openalex.org/W2120930843","https://openalex.org/W42013907"],"abstract_inverted_index":{"Recommender":[0],"systems":[1,29,47,100,122,175],"have":[2,23],"been":[3],"increasingly":[4],"used":[5],"in":[6,18,45,70,88,133],"a":[7,13,20,41,94,115],"variety":[8],"of":[9,15,101,137,158],"web":[10,72,90,129,150,159,177],"services,":[11],"providing":[12],"list":[14],"recommended":[16],"items":[17,69,87],"which":[19,52],"user":[21],"may":[22],"an":[24],"interest.":[25],"While":[26],"important,":[27],"recommender":[28,46,99,121,174],"are":[30],"vulnerable":[31],"to":[32,66,145,170],"various":[33],"malicious":[34,53,81],"attacks.":[35],"In":[36],"this":[37],"paper,":[38],"we":[39,112,161],"study":[40],"new":[42],"security":[43],"vulnerability":[44],"caused":[48],"byweb":[49],"injection,":[50,160],"through":[51,176],"actors":[54,82],"stealthily":[55],"tamper":[56],"any":[57],"unprotected":[58],"in-transit":[59],"HTTP":[60],"webpage":[61],"content":[62],"and":[63,108,142,167],"force":[64],"victims":[65],"visit":[67],"specific":[68],"some":[71],"services":[73],"(even":[74],"running":[75],"HTTPS),e.g.,":[76],"YouTube.":[77],"By":[78],"doing":[79],"so,":[80],"can":[83],"promote":[84],"their":[85],"targeted":[86],"those":[89],"services.":[91],"To":[92],"obtain":[93],"deeper":[95],"understanding":[96],"on":[97,118,155],"the":[98,147,156,172],"our":[102],"interest":[103],"(including":[104],"YouTube,":[105],"Yelp,":[106],"Taobao,":[107],"360":[109],"App":[110],"market),":[111],"first":[113],"conduct":[114],"measurement-based":[116],"analysis":[117],"several":[119,182],"real-world":[120,173],"by":[123],"leveraging":[124],"machine":[125],"learning":[126],"algorithms.":[127],"Then,":[128],"injection":[130,151],"is":[131,165],"implemented":[132],"three":[134],"different":[135],"types":[136],"devices":[138],"(i.e.,":[139],"computer,":[140],"router,":[141],"proxy":[143],"server)":[144],"investigate":[146],"scenarios":[148],"where":[149],"could":[152],"occur.":[153],"Based":[154],"implementation":[157],"demonstrate":[162],"that":[163],"it":[164],"feasible":[166],"sometimes":[168],"effective":[169],"manipulate":[171],"injection.":[178],"We":[179],"also":[180],"present":[181],"countermeasures":[183],"against":[184],"such":[185],"manipulations.":[186]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}