{"id":"https://openalex.org/W3154290626","doi":"https://doi.org/10.1145/3442381.3449891","title":"Adversarial Item Promotion: Vulnerabilities at the Core of Top-N Recommenders that Use Images to Address Cold Start","display_name":"Adversarial Item Promotion: Vulnerabilities at the Core of Top-N Recommenders that Use Images to Address Cold Start","publication_year":2021,"publication_date":"2021-04-19","ids":{"openalex":"https://openalex.org/W3154290626","doi":"https://doi.org/10.1145/3442381.3449891","mag":"3154290626"},"language":"en","primary_location":{"id":"doi:10.1145/3442381.3449891","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3442381.3449891","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3442381.3449891","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Web Conference 2021","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3442381.3449891","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046771199","display_name":"Zhuoran Liu","orcid":"https://orcid.org/0000-0002-3953-0637"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Zhuoran Liu","raw_affiliation_strings":["Radboud University, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University, Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063223989","display_name":"Martha Larson","orcid":"https://orcid.org/0000-0002-1430-4721"},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]},{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Martha Larson","raw_affiliation_strings":["Radboud University and Delft University of Technology, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Radboud University and Delft University of Technology, Netherlands","institution_ids":["https://openalex.org/I145872427","https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":22,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3590","last_page":"3602"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10318","display_name":"Criminal Justice and Corrections Analysis","score":0.9261999726295471,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.832398533821106},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8114352226257324},{"id":"https://openalex.org/keywords/recommender-system","display_name":"Recommender system","score":0.6489310264587402},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5006320476531982},{"id":"https://openalex.org/keywords/cold-start","display_name":"Cold start (automotive)","score":0.4899846613407135},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.46596482396125793},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.4498790502548218},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4349208474159241},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4337542653083801},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4237346649169922},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.407110333442688},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3239237070083618}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.832398533821106},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8114352226257324},{"id":"https://openalex.org/C557471498","wikidata":"https://www.wikidata.org/wiki/Q554950","display_name":"Recommender system","level":2,"score":0.6489310264587402},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5006320476531982},{"id":"https://openalex.org/C2778956030","wikidata":"https://www.wikidata.org/wiki/Q5142477","display_name":"Cold start (automotive)","level":2,"score":0.4899846613407135},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.46596482396125793},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.4498790502548218},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4349208474159241},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4337542653083801},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4237346649169922},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.407110333442688},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3239237070083618},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3442381.3449891","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3442381.3449891","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3442381.3449891","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Web Conference 2021","raw_type":"proceedings-article"},{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/233861","is_oa":true,"landing_page_url":"http://hdl.handle.net/2066/233861","pdf_url":"http://hdl.handle.net/2066/233861","source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Leskover, J. (ed.), WWW '21: Proceedings of the Web Conference 2021, Ljubljana Slovenia 19 April, 2021- 23 April, 2021, 3590 - \u20133602. New York : Association for Computing Machinery","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/233861","is_oa":false,"landing_page_url":"https://repository.ubn.ru.nl/handle/2066/233861","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Leskover, J. (ed.), WWW '21: Proceedings of the Web Conference 2021, Ljubljana Slovenia 19 April, 2021- 23 April, 2021, pp. 3590-\u20133602","raw_type":"Article in monograph or in proceedings"}],"best_oa_location":{"id":"doi:10.1145/3442381.3449891","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3442381.3449891","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3442381.3449891","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Web Conference 2021","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.4699999988079071,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3154290626.pdf","grobid_xml":"https://content.openalex.org/works/W3154290626.grobid-xml"},"referenced_works_count":45,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W1536558110","https://openalex.org/W1989279326","https://openalex.org/W2027731328","https://openalex.org/W2040367556","https://openalex.org/W2072651985","https://openalex.org/W2125908420","https://openalex.org/W2143183660","https://openalex.org/W2146851707","https://openalex.org/W2163605009","https://openalex.org/W2187089797","https://openalex.org/W2503523779","https://openalex.org/W2518680563","https://openalex.org/W2607219512","https://openalex.org/W2749687333","https://openalex.org/W2767826403","https://openalex.org/W2892160417","https://openalex.org/W2892421162","https://openalex.org/W2913848079","https://openalex.org/W2962907114","https://openalex.org/W2963001136","https://openalex.org/W2963173190","https://openalex.org/W2963207607","https://openalex.org/W2963268689","https://openalex.org/W2963542245","https://openalex.org/W2963564844","https://openalex.org/W2963601856","https://openalex.org/W2963655167","https://openalex.org/W2963900085","https://openalex.org/W2963903822","https://openalex.org/W2963955657","https://openalex.org/W2964153729","https://openalex.org/W2972646741","https://openalex.org/W2973176202","https://openalex.org/W2985282977","https://openalex.org/W2996568780","https://openalex.org/W3012794253","https://openalex.org/W3034412497","https://openalex.org/W3046754005","https://openalex.org/W3048511744","https://openalex.org/W3088433897","https://openalex.org/W3101291735","https://openalex.org/W3103340107","https://openalex.org/W3104774544","https://openalex.org/W4226280022"],"related_works":["https://openalex.org/W2497939785","https://openalex.org/W2219931199","https://openalex.org/W4241927574","https://openalex.org/W2295090739","https://openalex.org/W2735929803","https://openalex.org/W2971083348","https://openalex.org/W584290403","https://openalex.org/W3214288750","https://openalex.org/W2786642545","https://openalex.org/W3095646726"],"abstract_inverted_index":{"E-commerce":[0],"platforms":[1,18],"provide":[2],"their":[3,21,51,54],"customers":[4],"with":[5,161,235],"ranked":[6,34],"lists":[7],"of":[8,32,78,90,108,175,215],"recommended":[9],"items":[10,22],"matching":[11],"the":[12,30,63,88,93,106,135,173,213],"customers\u2019":[13],"preferences.":[14],"Merchants":[15],"on":[16,99],"e-commerce":[17],"would":[19],"like":[20],"to":[23,61,69,126,143,163,192,225,232],"appear":[24],"as":[25,27],"high":[26],"possible":[28],"in":[29,102,130,186],"top-N":[31],"these":[33,176],"lists.":[35],"In":[36,116,218],"this":[37,70],"paper,":[38],"we":[39,220],"demonstrate":[40],"how":[41],"unscrupulous":[42],"merchants":[43],"can":[44],"create":[45],"item":[46,144],"images":[47,60,101,191,224],"that":[48,58,84,124,133,189,206,222],"artificially":[49],"promote":[50],"products,":[52],"improving":[53],"rankings.":[55],"Recommender":[56],"systems":[57,104,231],"use":[59],"address":[62,193,226],"cold":[64,194,227],"start":[65,228],"problem":[66],"are":[67,121,159],"vulnerable":[68],"security":[71],"risk.":[72],"We":[73,146,196],"describe":[74],"a":[75,131,138,187],"new":[76],"type":[77],"attack,":[79,152,154,157],"Adversarial":[80],"Item":[81],"Promotion":[82],"(AIP),":[83],"strikes":[85],"directly":[86,141],"at":[87],"core":[89],"Top-N":[91],"recommenders:":[92],"ranking":[94],"mechanism":[95],"itself.":[96],"Existing":[97],"work":[98],"adversarial":[100,202],"recommender":[103,184,230],"investigates":[105],"implications":[107],"conventional":[109],"attacks,":[110],"which":[111,158],"target":[112],"deep":[113],"learning":[114],"classifiers.":[115],"contrast,":[117],"our":[118],"AIP":[119,149,216],"attacks":[120,123,150,177],"embedding":[122],"seek":[125],"push":[127],"features":[128],"representations":[129],"way":[132],"fools":[134],"ranker":[136],"(not":[137],"classifier)":[139],"and":[140,155,204],"leads":[142],"promotion.":[145],"introduce":[147],"three":[148,164,181],"insider":[151],"expert":[153],"semantic":[156],"defined":[160],"respect":[162],"successively":[165],"more":[166],"realistic":[167],"attack":[168],"models.":[169],"Our":[170],"experiments":[171],"evaluate":[172,198],"danger":[174,214],"when":[178],"mounted":[179],"against":[180],"representative":[182],"visually-aware":[183],"algorithms":[185],"framework":[188],"uses":[190],"start.":[195],"also":[197],"potential":[199,233],"defenses,":[200],"including":[201],"training":[203],"find":[205],"common,":[207],"currently-existing,":[208],"techniques":[209],"do":[210],"not":[211],"eliminate":[212],"attacks.":[217],"sum,":[219],"show":[221],"using":[223],"opens":[229],"threats":[234],"clear":[236],"practical":[237],"implications.":[238]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2021-04-26T00:00:00"}