{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T20:17:40Z","timestamp":1778271460069,"version":"3.51.4"},"publisher-location":"Singapore","reference-count":31,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819203628","type":"print"},{"value":"9789819203635","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-92-0363-5_9","type":"book-chapter","created":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T19:52:22Z","timestamp":1778269942000},"page":"138-153","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A Cognitive Distribution and\u00a0Behavior-Consistent Framework for\u00a0Black-Box Attacks on\u00a0Recommender Systems"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-3805-2189","authenticated-orcid":false,"given":"Hongyue","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mingming","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dongqin","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hui","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yaning","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xi","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Honglei","family":"Lv","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiao","family":"Dai","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jizhong","family":"Han","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,5,9]]},"reference":[{"issue":"1","key":"9_CR1","doi-asserted-by":"publisher","first-page":"64","DOI":"10.1017\/pan.2024.9","volume":"33","author":"Y Atsusaka","year":"2025","unstructured":"Atsusaka, Y.: Analyzing ballot order effects when voters rank candidates. Polit. Anal. 33(1), 64\u201372 (2025)","journal-title":"Polit. Anal."},{"key":"9_CR2","doi-asserted-by":"publisher","DOI":"10.1016\/j.is.2024.102427","volume":"125","author":"TF Boka","year":"2024","unstructured":"Boka, T.F., Niu, Z., Neupane, R.B.: A survey of sequential recommendation systems: techniques, evaluation, and future directions. Inf. Syst. 125, 102427 (2024)","journal-title":"Inf. Syst."},{"key":"9_CR3","doi-asserted-by":"crossref","unstructured":"Du, X., Chen, Y., Zhang, Y., Tang, J.: Precision profile pollution attack on sequential recommenders via influence function. arXiv preprint arXiv:2412.01127 (2024)","DOI":"10.2139\/ssrn.5070783"},{"issue":"4","key":"9_CR4","first-page":"1","volume":"5","author":"FM Harper","year":"2015","unstructured":"Harper, F.M., Konstan, J.A.: The movielens datasets: history and context. ACM Trans. Interact. Intell. Syst. (tiis) 5(4), 1\u201319 (2015)","journal-title":"ACM Trans. Interact. Intell. Syst. (tiis)"},{"issue":"1","key":"9_CR5","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/0010-0285(92)90002-J","volume":"24","author":"RM Hogarth","year":"1992","unstructured":"Hogarth, R.M., Einhorn, H.J.: Order effects in belief updating: the belief-adjustment model. Cogn. Psychol. 24(1), 1\u201355 (1992)","journal-title":"Cogn. Psychol."},{"key":"9_CR6","doi-asserted-by":"crossref","unstructured":"Kang, W.C., McAuley, J.: Self-attentive sequential recommendation. In: 2018 IEEE International Conference on Data Mining (ICDM), pp. 197\u2013206. IEEE (2018)","DOI":"10.1109\/ICDM.2018.00035"},{"key":"9_CR7","doi-asserted-by":"crossref","unstructured":"Kariyappa, S., Prakash, A., Qureshi, M.K.: Maze: data-free model stealing attack using zeroth-order gradient estimation. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 13814\u201313823 (2021)","DOI":"10.1109\/CVPR46437.2021.01360"},{"key":"9_CR8","doi-asserted-by":"crossref","unstructured":"Lam, S.K., Riedl, J.: Shilling recommender systems for fun and profit. In: Proceedings of the 13th International Conference on World Wide Web, pp. 393\u2013402 (2004)","DOI":"10.1145\/988672.988726"},{"key":"9_CR9","doi-asserted-by":"crossref","unstructured":"Li, J., Ren, P., Chen, Z., Ren, Z., Lian, T., Ma, J.: Neural attentive session-based recommendation. In: Proceedings of the 2017 ACM on Conference on Information and Knowledge Management, pp. 1419\u20131428 (2017)","DOI":"10.1145\/3132847.3132926"},{"key":"9_CR10","doi-asserted-by":"publisher","unstructured":"Li, M., et al.: Learning query-aware embedding index for improving e-commerce dense retrieval. In: Proceedings of the 46th International ACM SIGIR Conference on Research and Development in Information Retrieval, pp. 3265\u20133269. SIGIR \u201923, Association for Computing Machinery, New York, NY, USA (2023). https:\/\/doi.org\/10.1145\/3539618.3591834","DOI":"10.1145\/3539618.3591834"},{"key":"9_CR11","doi-asserted-by":"crossref","unstructured":"Li, M., et al.: Adaptive hyper-parameter learning for deep semantic retrieval. In: Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing: Industry Track, pp. 775\u2013782 (2023)","DOI":"10.18653\/v1\/2023.emnlp-industry.72"},{"key":"9_CR12","doi-asserted-by":"crossref","unstructured":"Liu, J., Chen, Q., Xu, J., Li, J., Li, B., Xu, S.: A unified search and recommendation framework based on multi-scenario learning for ranking in e-commerce. In: Proceedings of the 47th International ACM SIGIR Conference on Research and Development in Information Retrieval, pp. 2890\u20132894 (2024)","DOI":"10.1145\/3626772.3661356"},{"key":"9_CR13","doi-asserted-by":"crossref","unstructured":"McAuley, J., Targett, C., Shi, Q., Van Den\u00a0Hengel, A.: Image-based recommendations on styles and substitutes. In: Proceedings of the 38th international ACM SIGIR Conference on Research and Development in Information Retrieval, pp. 43\u201352 (2015)","DOI":"10.1145\/2766462.2767755"},{"key":"9_CR14","doi-asserted-by":"crossref","unstructured":"Ni, J., Li, J., McAuley, J.: Justifying recommendations using distantly-labeled reviews and fine-grained aspects. In: Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing and the 9th International Joint Conference on Natural Language Processing (EMNLP-IJCNLP), pp. 188\u2013197 (2019)","DOI":"10.18653\/v1\/D19-1018"},{"key":"9_CR15","doi-asserted-by":"crossref","unstructured":"Orekondy, T., Schiele, B., Fritz, M.: Knockoff nets: stealing functionality of black-box models. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 4954\u20134963 (2019)","DOI":"10.1109\/CVPR.2019.00509"},{"issue":"10","key":"9_CR16","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3661821","volume":"56","author":"K Sharma","year":"2024","unstructured":"Sharma, K., et al.: A survey of graph neural networks for social recommender systems. ACM Comput. Surv. 56(10), 1\u201334 (2024)","journal-title":"ACM Comput. Surv."},{"key":"9_CR17","doi-asserted-by":"crossref","unstructured":"Song, J., et al.: Poisonrec: an adaptive data poisoning framework for attacking black-box recommender systems. In: 2020 IEEE 36th International Conference on Data Engineering (ICDE), pp. 157\u2013168. IEEE (2020)","DOI":"10.1109\/ICDE48307.2020.00021"},{"key":"9_CR18","doi-asserted-by":"crossref","unstructured":"Sun, F., et al.: Bert4rec: sequential recommendation with bidirectional encoder representations from transformer. In: Proceedings of the 28th ACM International Conference on Information and Knowledge Management, pp. 1441\u20131450 (2019)","DOI":"10.1145\/3357384.3357895"},{"key":"9_CR19","unstructured":"Tram\u00e8r, F., Zhang, F., Juels, A., Reiter, M.K., Ristenpart, T.: Stealing machine learning models via prediction $$\\{$$APIs$$\\}$$. In: 25th USENIX Security Symposium (USENIX Security 16), pp. 601\u2013618 (2016)"},{"key":"9_CR20","doi-asserted-by":"publisher","unstructured":"Wang, B., et al.: Learning multi-stage multi-grained semantic embeddings for e-commerce search. In: Companion Proceedings of the ACM Web Conference 2023, pp. 411\u2013415. WWW \u201923 Companion, Association for Computing Machinery, New York, NY, USA (2023). https:\/\/doi.org\/10.1145\/3543873.3584638","DOI":"10.1145\/3543873.3584638"},{"key":"9_CR21","doi-asserted-by":"crossref","unstructured":"Wang, Y., Su, J., Chen, C., Han, M., Zhang, C., Wang, J.: Sim4rec: data-free model extraction attack on sequential recommendation. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol.\u00a039, pp. 12766\u201312774 (2025)","DOI":"10.1609\/aaai.v39i12.33392"},{"key":"9_CR22","unstructured":"Xing, X., Meng, W., Doozan, D., Snoeren, A.C., Feamster, N., Lee, W.: Take this personally: pollution attacks on personalized services. In: 22nd USENIX Security Symposium (USENIX Security 13), pp. 671\u2013686 (2013)"},{"key":"9_CR23","doi-asserted-by":"publisher","unstructured":"Xu, E., et al.: Optimizing e-commerce search: toward a generalizable and rank-consistent pre-ranking model. In: Proceedings of the 47th International ACM SIGIR Conference on Research and Development in Information Retrieval, pp. 2875\u20132879. SIGIR \u201924, Association for Computing Machinery, New York, NY, USA (2024). https:\/\/doi.org\/10.1145\/3626772.3661343","DOI":"10.1145\/3626772.3661343"},{"key":"9_CR24","doi-asserted-by":"crossref","unstructured":"Yue, Z., He, Z., Zeng, H., McAuley, J.: Black-box attacks on sequential recommenders via data-free model extraction. In: Proceedings of the 15th ACM Conference on Recommender Systems, pp. 44\u201354 (2021)","DOI":"10.1145\/3460231.3474275"},{"key":"9_CR25","doi-asserted-by":"crossref","unstructured":"Zhang, H., Li, Y., Ding, B., Gao, J.: Practical data poisoning attack against next-item recommendation. In: Proceedings of the Web Conference 2020, pp. 2458\u20132464 (2020)","DOI":"10.1145\/3366423.3379992"},{"key":"9_CR26","doi-asserted-by":"crossref","unstructured":"Zhang, H., et al.: Data poisoning attack against recommender system using incomplete and perturbed data. In: Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining, pp. 2154\u20132164 (2021)","DOI":"10.1145\/3447548.3467233"},{"key":"9_CR27","unstructured":"Zhang, H., Liu, F.: Few-shot model extraction attacks against sequential recommender systems. arXiv preprint arXiv:2411.11677 (2024)"},{"key":"9_CR28","doi-asserted-by":"crossref","unstructured":"Zhao, K., Li, L., Ding, K., Gong, N.Z., Zhao, Y., Dong, Y.: A survey on model extraction attacks and defenses for large language models. In: Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining, vol. 2, pp. 6227\u20136236 (2025)","DOI":"10.1145\/3711896.3736573"},{"key":"9_CR29","doi-asserted-by":"crossref","unstructured":"Zhao, X., Zhang, L., Xia, L., Ding, Z., Yin, D., Tang, J.: Deep reinforcement learning for list-wise recommendations. arXiv preprint arXiv:1801.00209 (2017)","DOI":"10.1145\/3240323.3240374"},{"key":"9_CR30","doi-asserted-by":"crossref","unstructured":"Zhu, Y., Chen, J., Chen, L., Li, Y., Zhang, F., Liu, Z.: Interest clock: time perception in real-time streaming recommendation system. In: Proceedings of the 47th International ACM SIGIR Conference on Research and Development in Information Retrieval, pp. 2915\u20132919 (2024)","DOI":"10.1145\/3626772.3661369"},{"key":"9_CR31","doi-asserted-by":"crossref","unstructured":"Zhu, Z., Wu, C., Fan, R., Lian, D., Chen, E.: Membership inference attacks against sequential recommender systems. In: Proceedings of the ACM Web Conference 2023, pp. 1208\u20131219 (2023)","DOI":"10.1145\/3543507.3583447"}],"container-title":["Lecture Notes in Computer Science","Database Systems for Advanced Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-92-0363-5_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T19:52:32Z","timestamp":1778269952000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-92-0363-5_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9789819203628","9789819203635"],"references-count":31,"URL":"https:\/\/doi.org\/10.1007\/978-981-92-0363-5_9","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"9 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Disclosure of Interests"}},{"value":"DASFAA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Database Systems for Advanced Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Jeju","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Korea (Republic of)","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 April 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 April 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"dasfaa2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/dasfaa2026.github.io\/index.html","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}