{"id":"https://openalex.org/W3171665710","doi":"https://doi.org/10.1145/3447548.3467233","title":"Data Poisoning Attack against Recommender System Using Incomplete and Perturbed Data","display_name":"Data Poisoning Attack against Recommender System Using Incomplete and Perturbed Data","publication_year":2021,"publication_date":"2021-08-13","ids":{"openalex":"https://openalex.org/W3171665710","doi":"https://doi.org/10.1145/3447548.3467233","mag":"3171665710"},"language":"en","primary_location":{"id":"doi:10.1145/3447548.3467233","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3447548.3467233","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085578723","display_name":"Hengtong Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Hengtong Zhang","raw_affiliation_strings":["Purdue University & State University of New York at Buffalo, Buffalo, NY, USA"],"affiliations":[{"raw_affiliation_string":"Purdue University & State University of New York at Buffalo, Buffalo, NY, USA","institution_ids":["https://openalex.org/I63190737"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088471665","display_name":"Changxin Tian","orcid":"https://orcid.org/0000-0002-3013-9439"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Changxin Tian","raw_affiliation_strings":["Renmin University of China & Beijing Key Laboratory of Big Data Management and Analysis Methods, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Renmin University of China & Beijing Key Laboratory of Big Data Management and Analysis Methods, Beijing, China","institution_ids":["https://openalex.org/I78988378"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046576694","display_name":"Yaliang Li","orcid":"https://orcid.org/0000-0002-4204-6096"},"institutions":[{"id":"https://openalex.org/I4210095624","display_name":"Alibaba Group (United States)","ror":"https://ror.org/00rn0m335","country_code":"US","type":"company","lineage":["https://openalex.org/I4210095624","https://openalex.org/I45928872"]},{"id":"https://openalex.org/I4210108985","display_name":"Bellevue Hospital Center","ror":"https://ror.org/01ky34z31","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I1283621791","https://openalex.org/I4210086933","https://openalex.org/I4210108985"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yaliang Li","raw_affiliation_strings":["Alibaba Group, Bellevue, WA, USA"],"affiliations":[{"raw_affiliation_string":"Alibaba Group, Bellevue, WA, USA","institution_ids":["https://openalex.org/I4210095624","https://openalex.org/I4210108985"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100732938","display_name":"L\u00fc Su","orcid":"https://orcid.org/0000-0001-7223-543X"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lu Su","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072808499","display_name":"Nan Yang","orcid":"https://orcid.org/0000-0002-2621-8927"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nan Yang","raw_affiliation_strings":["Renmin University of China, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Renmin University of China, Beijing, China","institution_ids":["https://openalex.org/I78988378"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037145565","display_name":"Wayne Xin Zhao","orcid":"https://orcid.org/0000-0002-8333-6196"},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wayne Xin Zhao","raw_affiliation_strings":["Renmin University of China & Beijing Key Laboratory of Big Data Management and Analysis Methods, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Renmin University of China & Beijing Key Laboratory of Big Data Management and Analysis Methods, Beijing, China","institution_ids":["https://openalex.org/I78988378"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100781385","display_name":"Jing Gao","orcid":"https://orcid.org/0000-0001-5099-6991"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jing Gao","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5085578723"],"corresponding_institution_ids":["https://openalex.org/I63190737"],"apc_list":null,"apc_paid":null,"fwci":4.8997,"has_fulltext":false,"cited_by_count":50,"citation_normalized_percentile":{"value":0.95852165,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"2154","last_page":"2164"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13702","display_name":"Machine Learning in Healthcare","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8306963443756104},{"id":"https://openalex.org/keywords/recommender-system","display_name":"Recommender system","score":0.7040114998817444},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5709248185157776},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.5199128985404968},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.4733193814754486},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.4590510427951813},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4424659311771393},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.43277472257614136},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.41897454857826233},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.41078561544418335},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3862634599208832},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3347002863883972},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.29466351866722107},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.2904638648033142},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.1590266227722168}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8306963443756104},{"id":"https://openalex.org/C557471498","wikidata":"https://www.wikidata.org/wiki/Q554950","display_name":"Recommender system","level":2,"score":0.7040114998817444},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5709248185157776},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.5199128985404968},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.4733193814754486},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4590510427951813},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4424659311771393},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.43277472257614136},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.41897454857826233},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.41078561544418335},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3862634599208832},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3347002863883972},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29466351866722107},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.2904638648033142},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.1590266227722168},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C136264566","wikidata":"https://www.wikidata.org/wiki/Q159810","display_name":"Economy","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3447548.3467233","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3447548.3467233","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5799999833106995}],"awards":[{"id":"https://openalex.org/G4379077367","display_name":null,"funder_award_id":"IIS-1747614","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1853291804","https://openalex.org/W1981631259","https://openalex.org/W1989279326","https://openalex.org/W2049633694","https://openalex.org/W2072651985","https://openalex.org/W2101409192","https://openalex.org/W2107569009","https://openalex.org/W2124187902","https://openalex.org/W2187089797","https://openalex.org/W2605350416","https://openalex.org/W2613314732","https://openalex.org/W2789607830","https://openalex.org/W2892160417","https://openalex.org/W2962727772","https://openalex.org/W2962763344","https://openalex.org/W2964043980","https://openalex.org/W2965653989","https://openalex.org/W3012794253","https://openalex.org/W3012798016","https://openalex.org/W3045200674","https://openalex.org/W3048511744","https://openalex.org/W3098649723","https://openalex.org/W3101291735","https://openalex.org/W3104774544","https://openalex.org/W4297971002"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W4307079546","https://openalex.org/W4283317927","https://openalex.org/W3201159406","https://openalex.org/W3102631191","https://openalex.org/W2078352417"],"abstract_inverted_index":{"Recent":[0],"studies":[1],"reveal":[2],"that":[3,152,203,226],"recommender":[4],"systems":[5],"are":[6,101],"vulnerable":[7],"to":[8,13,30,42,57,61,84,95,135,158,182,209],"data":[9,18,35,60,88,166,181,211],"poisoning":[10,19],"attack":[11,51,75,133,233],"due":[12,83],"their":[14],"openness":[15],"nature.":[16],"In":[17,121],"attack,":[20],"the":[21,37,44,58,67,85,92,96,105,110,126,137,160,190,227],"attacker":[22],"typically":[23],"recruits":[24],"a":[25,148,154,198],"group":[26],"of":[27,109,119,193],"controlled":[28,71],"users":[29,161,178],"inject":[31],"well-crafted":[32],"user-item":[33,142,185],"interaction":[34,143,165],"into":[36],"recommendation":[38,194,223],"model's":[39],"training":[40,59,97],"set":[41],"modify":[43],"model":[45,157],"parameters":[46],"as":[47],"desired.":[48],"Thus,":[49],"existing":[50,236],"approaches":[52,76,134,229],"usually":[53],"require":[54],"full":[55],"access":[56,94],"infer":[62],"items'":[63,180],"characteristics":[64],"and":[65,91,139,162,169,175,179,196,213],"craft":[66,183],"fake":[68,184],"interactions":[69],"for":[70],"users.":[72],"However,":[73],"such":[74],"may":[77,116],"not":[78,171],"be":[79],"feasible":[80],"in":[81,141],"practice":[82],"attacker's":[86],"limited":[87],"collection":[89],"capability":[90],"restricted":[93],"data,":[98],"which":[99],"sometimes":[100],"even":[102],"perturbed":[103],"by":[104,128],"privacy":[106],"preserving":[107],"mechanism":[108],"service":[111],"providers.":[112],"Such":[113],"design-reality":[114],"gap":[115,127],"cause":[117],"failure":[118],"attacks.":[120],"this":[122],"paper,":[123],"we":[124,146,188],"fill":[125],"proposing":[129],"two":[130,218],"novel":[131],"adversarial":[132],"handle":[136,210],"incompleteness":[138,212],"perturbations":[140],"data.":[144],"First,":[145],"propose":[147],"bi-level":[149],"optimization":[150],"framework":[151],"incorporates":[153],"probabilistic":[155],"generative":[156],"find":[159],"items":[163],"whose":[164],"is":[167],"sufficient":[168],"has":[170],"been":[172],"significantly":[173],"perturbed,":[174],"leverage":[176],"these":[177],"interactions.":[186],"Moreover,":[187],"reverse":[189],"learning":[191],"process":[192],"models":[195,224],"develop":[197],"simple":[199],"yet":[200],"effective":[201],"approach":[202],"can":[204,230],"incorporate":[205],"context-specific":[206],"heuristic":[207],"rules":[208],"perturbations.":[214],"Extensive":[215],"experiments":[216],"on":[217],"datasets":[219],"against":[220],"three":[221],"representative":[222],"show":[225],"proposed":[228],"achieve":[231],"better":[232],"performance":[234],"than":[235],"approaches.":[237]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":14},{"year":2022,"cited_by_count":7}],"updated_date":"2026-03-26T15:22:09.906841","created_date":"2025-10-10T00:00:00"}