{"id":"https://openalex.org/W3156766660","doi":"https://doi.org/10.1145/3404835.3462914","title":"Fight Fire with Fire: Towards Robust Recommender Systems via Adversarial Poisoning Training","display_name":"Fight Fire with Fire: Towards Robust Recommender Systems via Adversarial Poisoning Training","publication_year":2021,"publication_date":"2021-07-11","ids":{"openalex":"https://openalex.org/W3156766660","doi":"https://doi.org/10.1145/3404835.3462914","mag":"3156766660"},"language":"en","primary_location":{"id":"doi:10.1145/3404835.3462914","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3404835.3462914","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 44th International ACM SIGIR Conference on Research and Development in Information Retrieval","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033069158","display_name":"Chenwang Wu","orcid":"https://orcid.org/0000-0003-4937-0590"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenwang Wu","raw_affiliation_strings":["University of Science and Technology of China, Hefei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085254654","display_name":"Defu Lian","orcid":"https://orcid.org/0000-0002-3507-9607"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Defu Lian","raw_affiliation_strings":["University of Science and Technology of China, Hefei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101744165","display_name":"Yong Ge","orcid":"https://orcid.org/0000-0001-8094-4180"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yong Ge","raw_affiliation_strings":["University of Arizona, Tucson, AZ, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arizona, Tucson, AZ, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048511473","display_name":"Zhihao Zhu","orcid":"https://orcid.org/0000-0001-5814-1939"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihao Zhu","raw_affiliation_strings":["University of Science and Technology of China, Hefei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048237545","display_name":"Enhong Chen","orcid":"https://orcid.org/0000-0002-4835-4102"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Enhong Chen","raw_affiliation_strings":["University of Science and Technology of China, Hefei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078918611","display_name":"Senchao Yuan","orcid":null},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Senchao Yuan","raw_affiliation_strings":["University of Science and Technology of China, Hefei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.6889,"has_fulltext":false,"cited_by_count":48,"citation_normalized_percentile":{"value":0.95992408,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1074","last_page":"1083"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.897379457950592},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7974271178245544},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7759727239608765},{"id":"https://openalex.org/keywords/recommender-system","display_name":"Recommender system","score":0.7743201851844788},{"id":"https://openalex.org/keywords/counterintuitive","display_name":"Counterintuitive","score":0.5761262774467468},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4893283247947693},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4769541025161743},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4459350109100342},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42031192779541016},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.4130091369152069}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.897379457950592},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7974271178245544},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7759727239608765},{"id":"https://openalex.org/C557471498","wikidata":"https://www.wikidata.org/wiki/Q554950","display_name":"Recommender system","level":2,"score":0.7743201851844788},{"id":"https://openalex.org/C101097943","wikidata":"https://www.wikidata.org/wiki/Q5176983","display_name":"Counterintuitive","level":2,"score":0.5761262774467468},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4893283247947693},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4769541025161743},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4459350109100342},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42031192779541016},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.4130091369152069},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3404835.3462914","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3404835.3462914","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 44th International ACM SIGIR Conference on Research and Development in Information Retrieval","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W107297539","https://openalex.org/W392919349","https://openalex.org/W1989279326","https://openalex.org/W2022613648","https://openalex.org/W2029424893","https://openalex.org/W2048672094","https://openalex.org/W2072651985","https://openalex.org/W2117017885","https://openalex.org/W2133699849","https://openalex.org/W2137028279","https://openalex.org/W2188214461","https://openalex.org/W2509109313","https://openalex.org/W2604662567","https://openalex.org/W2605350416","https://openalex.org/W2613314732","https://openalex.org/W2614794251","https://openalex.org/W2794121917","https://openalex.org/W2798868970","https://openalex.org/W2799032844","https://openalex.org/W2799032899","https://openalex.org/W2801109448","https://openalex.org/W2890884621","https://openalex.org/W2892160417","https://openalex.org/W2897212375","https://openalex.org/W2900229157","https://openalex.org/W2903574258","https://openalex.org/W2903665338","https://openalex.org/W2913696151","https://openalex.org/W2949780682","https://openalex.org/W2950491307","https://openalex.org/W2954667104","https://openalex.org/W2962907114","https://openalex.org/W2962972504","https://openalex.org/W2964253222","https://openalex.org/W2970115835","https://openalex.org/W2972630152","https://openalex.org/W2972646741","https://openalex.org/W2972965281","https://openalex.org/W2997340900","https://openalex.org/W3006834354","https://openalex.org/W3012794253","https://openalex.org/W3012798016","https://openalex.org/W3012952868","https://openalex.org/W3031339255","https://openalex.org/W3034339445","https://openalex.org/W3048511744","https://openalex.org/W3101291735","https://openalex.org/W3103801215","https://openalex.org/W3133706083","https://openalex.org/W4212774754"],"related_works":["https://openalex.org/W3005839474","https://openalex.org/W4379988549","https://openalex.org/W2139510495","https://openalex.org/W2016376779","https://openalex.org/W1992379025","https://openalex.org/W2768389068","https://openalex.org/W3211393740","https://openalex.org/W3208049411","https://openalex.org/W3022908591","https://openalex.org/W4285706568"],"abstract_inverted_index":{"Recent":[0],"studies":[1],"have":[2],"shown":[3],"that":[4,79,159,178,203,216],"recommender":[5,40,72],"systems":[6],"are":[7,80,115],"vulnerable,":[8],"and":[9],"it":[10,34,87],"is":[11,213],"easy":[12],"for":[13,48,75],"attackers":[14],"to":[15,24,36,58,117,121,127,136],"inject":[16],"well-designed":[17],"malicious":[18],"profiles":[19],"into":[20],"the":[21,59,67,71,76,94,105,143,147,160,165,174,200,204],"system,":[22],"leading":[23],"biased":[25],"recommendations.":[26,50],"We":[27],"cannot":[28],"deny":[29],"these":[30],"data's":[31],"rationality,":[32],"making":[33],"imperative":[35],"establish":[37],"a":[38,123,182],"robust":[39,49,124],"system.":[41,73,125],"Adversarial":[42],"training":[43,54,101,180],"has":[44],"been":[45],"extensively":[46],"studied":[47],"However,":[51],"traditional":[52],"adversarial":[53,99,179],"adds":[55],"small":[56],"perturbations":[57],"parameters":[60],"(inputs),":[61],"which":[62],"do":[63],"not":[64,89],"comply":[65],"with":[66,152,192],"poisoning":[68,100,106,169,194],"mechanism":[69],"in":[70,222],"Thus":[74],"practical":[77],"models":[78],"very":[81],"good":[82],"at":[83],"learning":[84],"existing":[85],"data,":[86],"does":[88],"perform":[90],"well.":[91],"To":[92],"address":[93],"above":[95],"limitations,":[96],"we":[97,131,156,172],"propose":[98],"(APT).":[102],"It":[103,212],"simulates":[104],"process":[107],"by":[108],"injecting":[109],"fake":[110,139],"users":[111],"(ERM":[112],"users)":[113],"who":[114],"dedicated":[116],"minimizing":[118],"empirical":[119,144],"risk":[120],"build":[122],"Besides,":[126],"generate":[128],"ERM":[129],"users,":[130],"explore":[132],"an":[133],"approximation":[134],"approach":[135],"estimate":[137],"each":[138],"user's":[140],"influence":[141],"on":[142,185,196],"risk.":[145],"Although":[146],"strategy":[148],"of":[149,168,207],"\"fighting":[150],"fire":[151],"fire\"":[153],"seems":[154],"counterintuitive,":[155],"theoretically":[157],"prove":[158],"proposed":[161],"APT":[162,208,217],"can":[163],"boost":[164],"upper":[166],"bound":[167],"robustness.":[170,188],"Also,":[171],"deliver":[173],"first":[175],"theoretical":[176],"proof":[177],"holds":[181],"positive":[183],"effect":[184],"enhancing":[186],"recommendation":[187],"Through":[189],"extensive":[190],"experiments":[191],"five":[193],"attacks":[195],"four":[197],"real-world":[198],"datasets,":[199],"results":[201],"show":[202],"robustness":[205],"improvement":[206],"significantly":[209],"outperforms":[210],"baselines.":[211],"worth":[214],"mentioning":[215],"also":[218],"improves":[219],"model":[220],"generalization":[221],"most":[223],"cases.":[224]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":15},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}