{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T11:12:05Z","timestamp":1783768325204,"version":"3.55.0"},"reference-count":44,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T00:00:00Z","timestamp":1778025600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T00:00:00Z","timestamp":1778025600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"the Beijing Natural Science Foundation JQ23018"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Multimedia Systems"],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1007\/s00530-026-02321-x","type":"journal-article","created":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T05:40:28Z","timestamp":1778046028000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Badinterpreter: Backdoor attack on LLM-based interpretable recommendation"],"prefix":"10.1007","volume":"32","author":[{"given":"Bing","family":"Wang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jing","family":"Fang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shengsheng","family":"Qian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,5,6]]},"reference":[{"key":"2321_CR1","unstructured":"Touvron, H., Martin, L., Stone, K., Albert, P., Almahairi, A., Babaei, Y., Bashlykov, N., Batra, S., Bhargava, P., Bhosale, S., et al.: Llama 2: Open foundation and fine-tuned chat models. arXiv preprint arXiv:2307.09288 (2023)"},{"key":"2321_CR2","unstructured":"Achiam, J., Adler, S., Agarwal, S., Ahmad, L., Akkaya, I., Aleman, F.L., Almeida, D., Altenschmidt, J., Altman, S., Anadkat, S., et al.: Gpt-4 technical report. arXiv preprint arXiv:2303.08774 (2023)"},{"key":"2321_CR3","unstructured":"Zhuang, L., Wayne, L., Ya, S., Jun, Z.: A robustly optimized BERT pre-training approach with post-training. In: Li, S., Sun, M., Liu, Y., Wu, H., Liu, K., Che, W., He, S., Rao, G. (eds.) Proceedings of the 20th Chinese National Conference on Computational Linguistics, pp. 1218\u20131227. Chinese Information Processing Society of China, Huhhot, China (2021). https:\/\/aclanthology.org\/2021.ccl-1.108\/"},{"key":"2321_CR4","unstructured":"Xi, Z., Chen, W., Guo, X., He, W., Ding, Y., Hong, B., Zhang, M., Wang, J., Jin, S., Zhou, E., et al.: The rise and potential of large language model based agents: a survey. arXiv preprint arXiv:2309.07864 (2023)"},{"key":"2321_CR5","doi-asserted-by":"crossref","unstructured":"Muthusamy, V., Rizk, Y., Kate, K., Venkateswaran, P., Isahagian, V., Gulati, A., Dube, P.: Towards large language model-based personal agents in the enterprise: Current trends and open problems. In: Findings of the Association for Computational Linguistics: EMNLP 2023, pp. 6909\u20136921 (2023)","DOI":"10.18653\/v1\/2023.findings-emnlp.461"},{"key":"2321_CR6","doi-asserted-by":"crossref","unstructured":"Wang, L., Ma, C., Feng, X., Zhang, Z., Yang, H., Zhang, J., Chen, Z., Tang, J., Chen, X., Lin, Y., et al.: A survey on large language model based autonomous agents. arXiv preprint arXiv:2308.11432 (2023)","DOI":"10.1007\/s11704-024-40231-1"},{"key":"2321_CR7","unstructured":"Gao, Y., Doan, B.G., Zhang, Z., Ma, S., Zhang, J., Fu, A., Nepal, S., Kim, H.: Backdoor attacks and countermeasures on deep learning: a comprehensive review. arXiv preprint arXiv:2007.10760 (2020)"},{"issue":"2","key":"2321_CR8","doi-asserted-by":"publisher","first-page":"1563","DOI":"10.1109\/TPAMI.2022.3162397","volume":"45","author":"M Goldblum","year":"2022","unstructured":"Goldblum, M., Tsipras, D., Xie, C., Chen, X., Schwarzschild, A., Song, D., M\u0105dry, A., Li, B., Goldstein, T.: Dataset security for machine learning: data poisoning, backdoor attacks, and defenses. IEEE Trans. Pattern Anal. Mach. Intell. 45(2), 1563\u20131580 (2022)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"issue":"1","key":"2321_CR9","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1109\/TNNLS.2022.3182979","volume":"35","author":"Y Li","year":"2022","unstructured":"Li, Y., Jiang, Y., Li, Z., Xia, S.-T.: Backdoor learning: a survey. IEEE Trans. Neur. Netw. Learn. Syst. 35(1), 5\u201322 (2022)","journal-title":"IEEE Trans. Neur. Netw. Learn. Syst."},{"key":"2321_CR10","doi-asserted-by":"crossref","unstructured":"Chen, X., Salem, A., Chen, D., Backes, M., Ma, S., Shen, Q., Wu, Z., Zhang, Y.: Badnl: backdoor attacks against nlp models with semantic-preserving improvements. In: Proceedings of the 37th Annual Computer Security Applications Conference, pp. 554\u2013569 (2021)","DOI":"10.1145\/3485832.3485837"},{"key":"2321_CR11","doi-asserted-by":"crossref","unstructured":"Yang, W., Li, L., Zhang, Z., Ren, X., Sun, X., He, B.: Be careful about poisoned word embeddings: exploring the vulnerability of the embedding layers in NLP models. arXiv preprint arXiv:2103.15543 (2021)","DOI":"10.18653\/v1\/2021.naacl-main.165"},{"key":"2321_CR12","doi-asserted-by":"crossref","unstructured":"Wang, Y., Xue, D., Zhang, S., Qian, S.: Badagent: Inserting and activating backdoor attacks in LLM agents. arXiv preprint arXiv:2406.03007 (2024)","DOI":"10.18653\/v1\/2024.acl-long.530"},{"key":"2321_CR13","doi-asserted-by":"crossref","unstructured":"Yang, W., Bi, X., Lin, Y., Chen, S., Zhou, J., Sun, X.: Watch out for your agents! investigating backdoor threats to LLM-based agents. arXiv preprint arXiv:2402.11208 (2024)","DOI":"10.52202\/079017-3201"},{"key":"2321_CR14","doi-asserted-by":"crossref","unstructured":"Peng, Y., Chen, H., Lin, C.-S., Huang, G., Hu, J., Guo, H., Kong, B., Hu, S., Wu, X., Wang, X.: Uncertainty-aware explainable recommendation with large language models. In: 2024 International Joint Conference on Neural Networks (IJCNN), pp. 1\u20138 (2024). IEEE","DOI":"10.1109\/IJCNN60899.2024.10651104"},{"issue":"1","key":"2321_CR15","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1561\/1500000066","volume":"14","author":"Y Zhang","year":"2020","unstructured":"Zhang, Y., Chen, X.: Explainable recommendation: a survey and new perspectives. Found. Trends Inf. Retr. 14(1), 1\u2013101 (2020). https:\/\/doi.org\/10.1561\/1500000066","journal-title":"Found. Trends Inf. Retr."},{"key":"2321_CR16","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Chen, X., et al.: Explainable recommendation: a survey and new perspectives. Foundations and Trends\u00ae in Information Retrieval 14(1), 1\u2013101 (2020)","DOI":"10.1561\/1500000066"},{"key":"2321_CR17","doi-asserted-by":"crossref","unstructured":"Chen, X., Chen, H., Xu, H., Zhang, Y., Cao, Y., Qin, Z., Zha, H.: Personalized fashion recommendation with visual explanations based on multimodal attention network: Towards visually explainable recommendation. In: Proceedings of the 42nd International ACM SIGIR Conference on Research and Development in Information Retrieval, pp. 765\u2013774 (2019)","DOI":"10.1145\/3331184.3331254"},{"key":"2321_CR18","doi-asserted-by":"crossref","unstructured":"Balog, K., Radlinski, F., Arakelyan, S.: Transparent, scrutable and explainable user models for personalized recommendation. In: Proceedings of the 42nd International ACM SIGIR Conference on Research and Development in Information Retrieval, pp. 265\u2013274 (2019)","DOI":"10.1145\/3331184.3331211"},{"key":"2321_CR19","unstructured":"Li, L., Zhang, Y., Chen, L.: Personalized transformer for explainable recommendation. arXiv preprint arXiv:2105.11601 (2021)"},{"key":"2321_CR20","doi-asserted-by":"publisher","DOI":"10.1145\/3717833","author":"Z Liu","year":"2025","unstructured":"Liu, Z., Xu, Y., Cong, G., Zhu, L., Qiu, Q., Zhang, H.: Arts: a general and efficient multi-task self-prompt framework for explainable sequential recommendation. ACM Trans. Inf. Syst. (2025). https:\/\/doi.org\/10.1145\/3717833. (Just Accepted)","journal-title":"ACM Trans. Inf. Syst."},{"key":"2321_CR21","doi-asserted-by":"publisher","unstructured":"Zhang, X., Shi, S., Li, Y., Ma, W., Sun, P., Zhang, M.: Feature-enhanced neural collaborative reasoning for explainable recommendation. ACM Trans. Inf. Syst. 43(1) (2024) https:\/\/doi.org\/10.1145\/3690381","DOI":"10.1145\/3690381"},{"key":"2321_CR22","doi-asserted-by":"publisher","unstructured":"Lin, J., Dai, X., Xi, Y., Liu, W., Chen, B., Zhang, H., Liu, Y., Wu, C., Li, X., Zhu, C., Guo, H., Yu, Y., Tang, R., Zhang, W.: How can recommender systems benefit from large language models: a survey. ACM Trans. Inf. Syst. 43(2) (2025) https:\/\/doi.org\/10.1145\/3678004","DOI":"10.1145\/3678004"},{"key":"2321_CR23","doi-asserted-by":"publisher","unstructured":"Peng, Y., Gao, C., Zhang, Y., Dan, T., Du, X., Luo, H., Li, Y., Meng, X.: Denoising alignment with large language model for recommendation. ACM Trans. Inf. Syst. 43(2) (2025) https:\/\/doi.org\/10.1145\/3696662","DOI":"10.1145\/3696662"},{"key":"2321_CR24","doi-asserted-by":"publisher","unstructured":"Liu, F., Liu, Y., Chen, H., Cheng, Z., Nie, L., Kankanhalli, M.: Understanding before recommendation: Semantic aspect-aware review exploitation via large language models. ACM Trans. Inf. Syst. 43(2) (2025) https:\/\/doi.org\/10.1145\/3704999","DOI":"10.1145\/3704999"},{"key":"2321_CR25","doi-asserted-by":"crossref","unstructured":"Luo, Y., Cheng, M., Zhang, H., Lu, J., Chen, E.: Unlocking the potential of large language models for explainable recommendations. arXiv preprint arXiv:2312.15661 (2023)","DOI":"10.1007\/978-981-97-5569-1_18"},{"key":"2321_CR26","unstructured":"Chu, Z., Wang, Y., Cui, Q., Li, L., Chen, W., Li, S., Qin, Z., Ren, K.: Llm-guided multi-view hypergraph learning for human-centric explainable recommendation. CoRR abs\/2401.08217 (2024) https:\/\/doi.org\/10.48550\/ARXIV.2401.08217arXiv:2401.08217"},{"key":"2321_CR27","doi-asserted-by":"crossref","unstructured":"Chen, T., Yin, H., Ye, G., Huang, Z., Wang, Y., Wang, M.: Try this instead: Personalized and interpretable substitute recommendation. In: Proceedings of the 43rd International ACM SIGIR Conference on Research and Development in Information Retrieval, pp. 891\u2013900 (2020)","DOI":"10.1145\/3397271.3401042"},{"key":"2321_CR28","doi-asserted-by":"crossref","unstructured":"Kurita, K., Michel, P., Neubig, G.: Weight poisoning attacks on pre-trained models. arXiv preprint arXiv:2004.06660 (2020)","DOI":"10.18653\/v1\/2020.acl-main.249"},{"key":"2321_CR29","doi-asserted-by":"publisher","unstructured":"Zhang, S., Pan, Y., Liu, Q., Yan, Z., Choo, K.-K.R., Wang, G.: Backdoor attacks and defenses targeting multi-domain ai models: a comprehensive review. ACM Comput. Surv. 57(4) (2024) https:\/\/doi.org\/10.1145\/3704725","DOI":"10.1145\/3704725"},{"key":"2321_CR30","doi-asserted-by":"publisher","first-page":"37068","DOI":"10.52202\/068431-2686","volume":"35","author":"X Cai","year":"2022","unstructured":"Cai, X., Xu, H., Xu, S., Zhang, Y., et al.: Badprompt: Backdoor attacks on continuous prompts. Adv. Neural. Inf. Process. Syst. 35, 37068\u201337080 (2022)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"2321_CR31","doi-asserted-by":"crossref","unstructured":"Xu, J., Ma, M.D., Wang, F., Xiao, C., Chen, M.: Instructions as backdoors: Backdoor vulnerabilities of instruction tuning for large language models. arXiv preprint arXiv:2305.14710 (2023)","DOI":"10.18653\/v1\/2024.naacl-long.171"},{"key":"2321_CR32","doi-asserted-by":"crossref","unstructured":"Yan, J., Yadav, V., Li, S., Chen, L., Tang, Z., Wang, H., Srinivasan, V., Ren, X., Jin, H.: Backdooring instruction-tuned large language models with virtual prompt injection. In: Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers), pp. 6065\u20136086 (2024)","DOI":"10.18653\/v1\/2024.naacl-long.337"},{"key":"2321_CR33","unstructured":"Liang, Z., Ye, Q., Liu, A.X., Wang, Y., Xu, J., Hu, H.: Virus infection attack on llms: Your poisoning can spread \u201cvia\u201d synthetic data. ArXiv abs\/2509.23041 (2025)"},{"key":"2321_CR34","unstructured":"Wang, T., Chen, Y., Liu, Z., Chen, Z., Chen, H., Zhang, X., Cheng, W.: Humanizing the machine: Proxy attacks to mislead LLM detectors. In: The Thirteenth International Conference on Learning Representations, ICLR 2025, Singapore, April 24-28, 2025. OpenReview.net (2025). https:\/\/openreview.net\/forum?id=PIpGN5Ko3v"},{"key":"2321_CR35","unstructured":"Ramesh, A., Bhardwaj, S., Saibewar, A., Kaul, M.: Efficient jailbreak attack sequences on large language models via multi-armed bandit-based context switching. In: Yue, Y., Garg, A., Peng, N., Sha, F., Yu, R. (eds.) International Conference on Learning Representations, vol. 2025, pp. 33376\u201333420 (2025). https:\/\/proceedings.iclr.cc\/paper_files\/paper\/2025\/file\/52724c4ea3634f610b0ef0245ce5bd20-Paper-Conference.pdf"},{"key":"2321_CR36","unstructured":"Yao, S., Chen, H., Yang, J., Narasimhan, K.: Webshop: Towards scalable real-world web interaction with grounded language agents. In: ArXiv (preprint)"},{"key":"2321_CR37","unstructured":"Zhou, S., Xu, F.F., Zhu, H., Zhou, X., Lo, R., Sridhar, A., Cheng, X., Bisk, Y., Fried, D., Alon, U., et al.: Webarena: A realistic web environment for building autonomous agents. arXiv preprint arXiv:2307.13854 (2023)"},{"key":"2321_CR38","doi-asserted-by":"crossref","unstructured":"Zeng, A., Liu, M., Lu, R., Wang, B., Liu, X., Dong, Y., Tang, J.: Agenttuning: Enabling generalized agent abilities for llms. arXiv preprint arXiv:2310.12823 (2023)","DOI":"10.18653\/v1\/2024.findings-acl.181"},{"key":"2321_CR39","unstructured":"Jiang, A.Q., Sablayrolles, A., Mensch, A., Bamford, C., Chaplot, D.S., Casas, D.d.l., Bressand, F., Lengyel, G., Lample, G., Saulnier, L., et al.: Mistral 7b. arXiv preprint arXiv:2310.06825 (2023)"},{"key":"2321_CR40","unstructured":"Dubey, A., Jauhri, A., Pandey, A., Kadian, A., Al-Dahle, A., Letman, A., Mathur, A., Schelten, A., Yang, A., Fan, A., et al.: The llama 3 herd of models. arXiv preprint arXiv:2407.21783 (2024)"},{"key":"2321_CR41","unstructured":"GLM, T., Zeng, A., Xu, B., Wang, B., Zhang, C., Yin, D., Rojas, D., Feng, G., Zhao, H., Lai, H., et al.: Chatglm: a family of large language models from GLM-130b to GLM-4 all tools. arXiv preprint arXiv:2406.12793 (2024)"},{"key":"2321_CR42","unstructured":"Team, G., Riviere, M., Pathak, S., Sessa, P.G., Hardin, C., Bhupatiraju, S., Hussenot, L., Mesnard, T., Shahriari, B., Ram\u00e9, A., et al.: Gemma 2: Improving open language models at a practical size. arXiv preprint arXiv:2408.00118 (2024)"},{"key":"2321_CR43","doi-asserted-by":"crossref","unstructured":"Liu, K., Dolan-Gavitt, B., Garg, S.: Fine-pruning: Defending against backdooring attacks on deep neural networks. In: International Symposium on Research in Attacks, Intrusions, and Defenses, pp. 273\u2013294 (2018). Springer","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"2321_CR44","unstructured":"Hu, E.J., Shen, Y., Wallis, P., Allen-Zhu, Z., Li, Y., Wang, S., Wang, L., Chen, W.: Lora: Low-rank adaptation of large language models. arXiv preprint arXiv:2106.09685 (2021)"}],"container-title":["Multimedia Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00530-026-02321-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00530-026-02321-x","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00530-026-02321-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T10:18:47Z","timestamp":1783765127000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00530-026-02321-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,6]]},"references-count":44,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2026,6]]}},"alternative-id":["2321"],"URL":"https:\/\/doi.org\/10.1007\/s00530-026-02321-x","relation":{"has-preprint":[{"id-type":"doi","id":"10.21203\/rs.3.rs-8024735\/v1","asserted-by":"object"}]},"ISSN":["0942-4962","1432-1882"],"issn-type":[{"value":"0942-4962","type":"print"},{"value":"1432-1882","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5,6]]},"assertion":[{"value":"4 November 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 February 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"6 May 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no Conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"258"}}