{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T11:26:46Z","timestamp":1783423606621,"version":"3.54.6"},"reference-count":53,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T00:00:00Z","timestamp":1755820800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T00:00:00Z","timestamp":1755820800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"funder":[{"DOI":"10.13039\/501100000038","name":"Natural Sciences and Engineering Research Council of Canada","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000038","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Discov Computing"],"DOI":"10.1007\/s10791-025-09702-2","type":"journal-article","created":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T01:53:19Z","timestamp":1755827599000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Penalized GANs with latent perturbation for robust shilling attack generation in recommender systems"],"prefix":"10.1007","volume":"28","author":[{"given":"Dina","family":"Nawara","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rasha","family":"Kashef","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,8,22]]},"reference":[{"key":"9702_CR1","doi-asserted-by":"publisher","DOI":"10.3390\/app10217748","author":"Z Fayyaz","year":"2020","unstructured":"Fayyaz Z, Ebrahimian M, Nawara D, Ibrahim A, Kashef R. Recommendation systems: algorithms, challenges, metrics, and business opportunities. Appl Sci. 2020. https:\/\/doi.org\/10.3390\/app10217748.","journal-title":"Appl Sci"},{"key":"9702_CR2","unstructured":"Li F, Zou X, Hu Q, Gao T. Multi-Armed-Bandit-based Shilling Attack on Collaborative Filtering Recommender Systems, in 2020 IEEE 17th International Conference on Mobile Ad Hoc and Sensor Systems (MASS), 2020."},{"key":"9702_CR3","doi-asserted-by":"publisher","first-page":"2169","DOI":"10.1109\/ACCESS.2020.3022962","volume":"8","author":"AP Sundar","year":"2020","unstructured":"Sundar AP, Li F, Zou X, Gao T, Russomanno ED. Understanding shilling attacks and their detection traits: a comprehensive survey. IEEE Access. 2020;8:2169\u20133536.","journal-title":"IEEE Access"},{"key":"9702_CR4","doi-asserted-by":"publisher","first-page":"4794","DOI":"10.1109\/TIFS.2024.3380248","volume":"19","author":"N Xu","year":"2024","unstructured":"Xu N, Feng W, Zhang T, Zhang Y. A unified optimization framework for feature-based transferable attacks. IEEE Trans Inf Forensics Secur. 2024;19:4794\u2013808.","journal-title":"IEEE Trans Inf Forensics Secur"},{"key":"9702_CR5","doi-asserted-by":"publisher","first-page":"2011","DOI":"10.1007\/s10462-020-09898-3","volume":"54","author":"F Rezaimehr","year":"2020","unstructured":"Rezaimehr F, Dadkhah C. A survey of attack detection approaches in collaborative filtering recommender systems. Artif Intell Rev. 2020;54:2011\u201366.","journal-title":"Artif Intell Rev"},{"issue":"1","key":"9702_CR6","doi-asserted-by":"publisher","first-page":"1678","DOI":"10.1080\/09540091.2022.2078280","volume":"34","author":"L Li","year":"2022","unstructured":"Li L, Wang Z, Li C, Chen L, Wang Y. Collaborative filtering recommendation using fusing criteria against shilling attacks. Connect Sci. 2022;34(1):1678\u201396.","journal-title":"Connect Sci"},{"key":"9702_CR7","doi-asserted-by":"crossref","unstructured":"Aly A, Nawara D, Kashef R. ROBUREC: Building a Robust Recommender using Autoencoders with Anomaly Detection, in ASONAM \u201823: Proceedings of the International Conference on Advances in Social Networks Analysis and Mining, 2023.","DOI":"10.1145\/3625007.3630112"},{"issue":"1","key":"9702_CR8","doi-asserted-by":"publisher","first-page":"612","DOI":"10.1109\/TCSS.2022.3223516","volume":"11","author":"D Nawara","year":"2024","unstructured":"Nawara D, Kashef R. A salable multicontext-aware recommender system. IEEE Trans Comput Social Syst. 2024;11(1):612\u201324.","journal-title":"IEEE Trans Comput Social Syst"},{"key":"9702_CR9","doi-asserted-by":"publisher","DOI":"10.32604\/cmc.2022.020437","author":"PK Singh","year":"2022","unstructured":"Singh PK, Pramanik PKD, Sardar M, Nayyar A, Masud M, Choudhury P. Generating a new shilling attack for recommendation systems. Comput Mater Continua. 2022. https:\/\/doi.org\/10.32604\/cmc.2022.020437.","journal-title":"Comput Mater Continua"},{"key":"9702_CR10","doi-asserted-by":"publisher","first-page":"377","DOI":"10.1007\/s00500-021-05586-8","volume":"27","author":"S Rani","year":"2023","unstructured":"Rani S, Kaur M, Kumar M, Ravi V, Ghosh U, Mohanty JR. Detection of shilling attack in recommender system for YouTube video statistics using machine learning techniques. Soft Comput. 2023;27:377\u201389.","journal-title":"Soft Comput"},{"key":"9702_CR11","doi-asserted-by":"crossref","unstructured":"Lu Q, Gao M. A Research on Shilling Attacks Based on Variational graph auto-encoders for Improving the Robustness of Recommendation Systems, in Proceedings of the 2024 International Conference on Generative Artificial Intelligence and Information Security Pages 120\u2013126 https:\/\/doi.org\/10.1145\/3665348.366537, 2024.","DOI":"10.1145\/3665348.3665370"},{"key":"9702_CR12","unstructured":"MovieLens 100K, [Online]. Available: https:\/\/grouplens.org\/datasets\/movielens\/100k\/. [Accessed 2024]."},{"key":"9702_CR13","unstructured":"Amazon Dataset, [Online]. Available: https:\/\/www.kaggle.com\/datasets\/yasserh\/amazon-product-reviews-dataset. [Accessed 2024]."},{"key":"9702_CR14","first-page":"1","volume":"1","author":"D Nawara","year":"2024","unstructured":"Nawara D, Aly A, Kashef R. Shilling attacks and fake reviews injection: principles, models, and datasets. IEEE Trans Comput Social Syst. 2024;1:1\u201314.","journal-title":"IEEE Trans Comput Social Syst"},{"key":"9702_CR15","doi-asserted-by":"publisher","unstructured":"Mobasher B, Burke R, Bhaumik R, Williams C. Toward trustworthy recommender systems: an analysis of attack models and algorithm robustness. ACM Trans Internet Technol. 2007;23-es. https:\/\/doi.org\/10.1145\/1278366.1278372","DOI":"10.1145\/1278366.1278372"},{"key":"9702_CR16","doi-asserted-by":"crossref","unstructured":"Jiang F, Tian R. The Influence of Shilling Attacks with Different Attack Cycles, in 2017 6th IIAI International Congress on Advanced Applied Informatics (IIAI-AAI), 2017.","DOI":"10.1109\/IIAI-AAI.2017.208"},{"key":"9702_CR17","unstructured":"Zhang Z, Kulkarni SR. Detection of shilling attacks in recommender systems via spectral clustering, in 17th International Conference on Information Fusion (FUSION), 2014."},{"key":"9702_CR18","doi-asserted-by":"publisher","first-page":"1833","DOI":"10.1007\/s13042-018-0861-2","volume":"10","author":"K Chen","year":"2018","unstructured":"Chen K, Chan PPK, Zhang F, Li Q. Shilling attack based on item popularity and rated item correlation against collaborative filtering. Int J Mach Learn Cybern. 2018;10:1833\u201345.","journal-title":"Int J Mach Learn Cybern"},{"key":"9702_CR19","doi-asserted-by":"crossref","unstructured":"Patel K, Thakkar A, Shah C, Makvana K. A State of Art Survey on Shilling Attack in Collaborative Filtering Based Recommendation System, in Proceedings of First International Conference on Information and Communication Technology for Intelligent Systems, 2016.","DOI":"10.1007\/978-3-319-30933-0_38"},{"key":"9702_CR20","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1016\/j.knosys.2019.04.001","volume":"177","author":"H Cai","year":"2019","unstructured":"Cai H, Zhang F. Detecting shilling attacks in recommender systems based on analysis of user rating behavior. Knowl-Based Syst. 2019;177:22\u201343.","journal-title":"Knowl-Based Syst"},{"key":"9702_CR21","doi-asserted-by":"crossref","unstructured":"Kaur P, Goel S. Shilling attack models in recommender system, in 2016 International Conference on Inventive Computation Technologies (ICICT), 2016.","DOI":"10.1109\/INVENTIVE.2016.7824865"},{"key":"9702_CR22","doi-asserted-by":"publisher","first-page":"547","DOI":"10.1007\/s10791-016-9284-4","volume":"19","author":"I Gunes","year":"2016","unstructured":"Gunes I, Polat H. Detecting shilling attacks in private environments. Inf Retr J. 2016;19:547\u201372.","journal-title":"Inf Retr J"},{"key":"9702_CR23","doi-asserted-by":"publisher","DOI":"10.1155\/2018\/8174603","author":"Y Hao","year":"2018","unstructured":"Hao Y, Zhang P, Zhang F. Multiview ensemble method for detecting shilling attacks in collaborative recommender systems. Secur Commun Networks. 2018. https:\/\/doi.org\/10.1155\/2018\/8174603","journal-title":"Secur Commun Networks"},{"key":"9702_CR24","unstructured":"Shrestha A, Spezzano F, Pera MS. An empirical analysis of collaborative recommender systems robustness to shilling attacks. in Comput Sci Fac Publications Presentations, vol. 3012; 2021."},{"key":"9702_CR25","doi-asserted-by":"crossref","unstructured":"Fire M, Puzis R, Kagan D, Elovici Y. Large-Scale Shill Bidder Detection in E-commerce, in IDEAS \u201823: Proceedings of the 27th International Database Engineered Applications Symposium, 2023.","DOI":"10.1145\/3589462.3589479"},{"key":"9702_CR26","doi-asserted-by":"crossref","unstructured":"Jiang Y, Zhou Y, Wu D, Li C, Wang Y. On the Detection of Shilling Attacks in Federated Collaborative Filtering, in 2020 International Symposium on Reliable Distributed Systems (SRDS), 2020.","DOI":"10.1109\/SRDS51746.2020.00026"},{"key":"9702_CR27","doi-asserted-by":"publisher","first-page":"2929","DOI":"10.1007\/s40747-021-00357-2","volume":"9","author":"L Yang","year":"2023","unstructured":"Yang L, Niu X. A genre trust model for defending shilling attacks in recommender systems. Complex Intell Syst. 2023;9:2929\u201342.","journal-title":"Complex Intell Syst"},{"issue":"5","key":"9702_CR28","doi-asserted-by":"publisher","first-page":"1189","DOI":"10.1109\/TCSS.2020.3013878","volume":"7","author":"F Zhang","year":"2020","unstructured":"Zhang F, Wang S. Detecting group shilling attacks in online recommender systems based on bisecting K-means clustering. IEEE Trans Comput Social Syst. 2020;7(5):1189\u201399.","journal-title":"IEEE Trans Comput Social Syst"},{"key":"9702_CR29","doi-asserted-by":"publisher","first-page":"197","DOI":"10.1016\/j.neucom.2015.12.137","volume":"210","author":"W Zhou","year":"2016","unstructured":"Zhou W, Wen J, Xiong Q, Gao M, Zeng J. SVM-tia a shilling attack detection method based on SVM and target item analysis in recommender systems. Neurocomputing. 2016;210:197\u2013205.","journal-title":"Neurocomputing"},{"issue":"7","key":"9702_CR30","doi-asserted-by":"publisher","first-page":"949","DOI":"10.1093\/comjnl\/bxy008","volume":"61","author":"C Tong","year":"2018","unstructured":"Tong C, Yin X, Li J, Zhu T, Lv R, Sun L, Rodrigues JJPC. A shilling attack detector based on convolutional neural network for collaborative recommender system in social aware network. Comput J. 2018;61(7):949\u201358.","journal-title":"Comput J"},{"issue":"1","key":"9702_CR31","doi-asserted-by":"crossref","first-page":"1950011-1","DOI":"10.1142\/S0219649219500114","volume":"18","author":"JM Alostad","year":"2019","unstructured":"Alostad JM. Improving the shilling attack detection in recommender systems using an SVM Gaussian mixture model. J Inform Knowl Manage. 2019;18(1):1950011-1\u20131950011-15.","journal-title":"J Inform Knowl Manage"},{"key":"9702_CR32","doi-asserted-by":"crossref","unstructured":"Chirita P-A, Nejdl W, Zamfir C. Preventing shilling attacks in online recommender systems, in WIDM \u201805: Proceedings of the 7th annual ACM international workshop on Web information and data management, 2005.","DOI":"10.1145\/1097047.1097061"},{"key":"9702_CR33","unstructured":"Bansal S, Baliyan N. Evaluation of Collaborative Filtering Based Recommender Systems against Segment-Based Shilling Attacks, in 2019 International Conference on Computing, Power and Communication Technologies (GUCON), 2019."},{"key":"9702_CR34","doi-asserted-by":"crossref","unstructured":"Singh PK, Setta S, Pramanik PKD, Choudhury P. Improving the Accuracy of Collaborative Filtering-Based Recommendations by Considering the Temporal Variance of Top-N Neighbors, in International Conference on Innovative Computing and Communications, 2020.","DOI":"10.1007\/978-981-15-1286-5_1"},{"key":"9702_CR35","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2021.107390","volume":"230","author":"J Barbieri","year":"2021","unstructured":"Barbieri J, Alvim LG, Braida F, Zimbr\u00e3o G. Simulating real profiles for shilling attacks: a generative approach. Knowledge-Based Systems. 2021;230: 107390.","journal-title":"Knowledge-Based Systems"},{"key":"9702_CR36","doi-asserted-by":"crossref","unstructured":"Feng W, Xu N, Zhang T, Zhang Y. Dynamic Generative Targeted Attacks With Pattern Injection, in Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR), 2023.","DOI":"10.1109\/CVPR52729.2023.01574"},{"key":"9702_CR37","doi-asserted-by":"crossref","unstructured":"Feng W, Xu N, Zhang T, Zhang Y, Wu F. Enhancing Cross-task transferability of adversarial examples via Spatial and channel attention. IEEE Trans Multimedia, Early Access, pp. 1\u201315; 2024.","DOI":"10.1109\/TMM.2024.3349925"},{"key":"9702_CR38","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.2765202","author":"A Creswell","year":"2018","unstructured":"Creswell A, White T, Dumoulin V, Arulkumaran K, Sengupta B, Bharath AA. Generative adversarial networks: an overview. IEEE Signal Process Mag. 2018. https:\/\/doi.org\/10.1109\/MSP.2017.2765202.","journal-title":"IEEE Signal Process Mag"},{"key":"9702_CR39","doi-asserted-by":"publisher","DOI":"10.1145\/3301282","author":"Y Hong","year":"2020","unstructured":"Hong Y, Hwang U, Yoo J, Yoon S. How generative adversarial networks and their variants work: an overview. ACM Comput Surv. 2020. https:\/\/doi.org\/10.1145\/3301282.","journal-title":"ACM Comput Surv"},{"key":"9702_CR40","doi-asserted-by":"crossref","unstructured":"Lin C, Chen S, Li H, Xiao Y, Li L, Yang Q. Attacking Recommender Systems with Augmented User Profiles, in CIKM \u201820: Proceedings of the 29th ACM International Conference on Information & Knowledge Management, 2020.","DOI":"10.1145\/3340531.3411884"},{"key":"9702_CR41","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3183210","author":"CTPC Lin","year":"2024","unstructured":"Lin CTPC, Chen S, Zeng M, Zhang S, Gao M, Li H. Shilling black-box recommender systems by learning to generate fake user profiles. IEEE Trans Neural Netw Learn Syst. 2024. https:\/\/doi.org\/10.1109\/TNNLS.2022.3183210.","journal-title":"IEEE Trans Neural Netw Learn Syst"},{"issue":"3","key":"9702_CR42","first-page":"249","volume":"13","author":"C Maier","year":"2022","unstructured":"Maier C, Simovici D. Bipartite graphs and recommendation systems. J Adv Inf Technol. 2022;13(3):249\u201358.","journal-title":"J Adv Inf Technol"},{"key":"9702_CR43","doi-asserted-by":"crossref","unstructured":"Gurukar S, Pancha N, Zhai A, Kim E, Hu S, Parthasarathy S, Rosenberg C, Leskovec J. MultiBiSage: A Web-Scale recommendation system using multiple bipartite graphs at pinterest. Mach Learn. 2022. arXiv preprint arXiv:2205.10666.","DOI":"10.14778\/3574245.3574262"},{"key":"9702_CR44","doi-asserted-by":"crossref","unstructured":"Zhang J, Shi X, Zhao S, King I. STAR-GCN: stacked and reconstructed graph convolutional networks for recommender systems. Inf Retr. 2019. arXiv preprint arXiv:1905.13129.","DOI":"10.24963\/ijcai.2019\/592"},{"key":"9702_CR45","doi-asserted-by":"publisher","first-page":"13047","DOI":"10.1007\/s00521-020-05667-z","volume":"35","author":"DH Tran","year":"2021","unstructured":"Tran DH, Sheng QZ, Zhang WE, Aljubairy A, Zaib M, Hamad SA, Tran NH, Khoa NLD. HeteGraph: graph learning in recommender systems via graph convolutional networks. Neural Comput Appl. 2021;35:13047\u201363.","journal-title":"Neural Comput Appl"},{"key":"9702_CR46","doi-asserted-by":"publisher","first-page":"26","DOI":"10.1016\/j.neucom.2020.12.114","volume":"435","author":"Y Li","year":"2021","unstructured":"Li Y, Wang Q, Zhang J, Hu L, Ouyang W. The theoretical research of generative adversarial networks: an overview. Neurocomputing. 2021;435:26\u201341.","journal-title":"Neurocomputing"},{"key":"9702_CR47","doi-asserted-by":"publisher","first-page":"487","DOI":"10.1016\/j.neucom.2018.10.109","volume":"396","author":"X Gao","year":"2020","unstructured":"Gao X, Deng F, Yue X. Data augmentation in fault diagnosis based on the Wasserstein generative adversarial network with gradient penalty. Neurocomputing. 2020;396:487\u201394.","journal-title":"Neurocomputing"},{"key":"9702_CR48","unstructured":"Adler J, Lunz S. Banach Wasserstein GAN, in Advances in Neural Information Processing Systems 31 (NeurIPS 2018), 2018."},{"key":"9702_CR49","doi-asserted-by":"crossref","unstructured":"Doubinsky P, Audebert N, Crucianu M, Borgne HL. Wasserstein loss for Semantic Editing in the Latent Space of GANs, in CBMI \u201823: Proceedings of the 20th International Conference on Content-based Multimedia Indexing, 2023.","DOI":"10.1145\/3617233.3617237"},{"key":"9702_CR50","doi-asserted-by":"publisher","first-page":"363","DOI":"10.1016\/j.neucom.2018.10.014","volume":"323","author":"Y Li","year":"2019","unstructured":"Li Y, Xiao N, Ouyang W. Improved generative adversarial networks with reconstruction loss. Neurocomputing. 2019;323:363\u201372.","journal-title":"Neurocomputing"},{"key":"9702_CR51","doi-asserted-by":"publisher","first-page":"46","DOI":"10.1016\/j.knosys.2018.01.003","volume":"145","author":"H Wu","year":"2018","unstructured":"Wu H, Zhang Z, Yue K, Zhang B, He J, Sun L. Dual-regularized matrix factorization with deep neural networks for recommender systems. Knowl-Based Syst. 2018;145:46\u201358.","journal-title":"Knowl-Based Syst"},{"key":"9702_CR52","unstructured":"Alsini A, Huynh DQ, Datta A. Hit ratio: an evaluation metric for hashtag recommendation. Inf Retr. 2020;1. arXiv preprint arXiv:2010.01258."},{"key":"9702_CR53","doi-asserted-by":"crossref","unstructured":"Zhu Z, Wang J, Caverlee J. Measuring and Mitigating Item Under-Recommendation Bias in Personalized Ranking Systems, in SIGIR \u201820: Proceedings of the 43rd International ACM SIGIR Conference on Research and Development in Information Retrieva, 2020.","DOI":"10.1145\/3397271.3401177"}],"container-title":["Discover Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10791-025-09702-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10791-025-09702-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10791-025-09702-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,9]],"date-time":"2025-09-09T18:59:25Z","timestamp":1757444365000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10791-025-09702-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8,22]]},"references-count":53,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,12]]}},"alternative-id":["9702"],"URL":"https:\/\/doi.org\/10.1007\/s10791-025-09702-2","relation":{"has-preprint":[{"id-type":"doi","id":"10.21203\/rs.3.rs-6395334\/v1","asserted-by":"object"}]},"ISSN":["2948-2992"],"issn-type":[{"value":"2948-2992","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,8,22]]},"assertion":[{"value":"7 April 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"6 August 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 August 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent to publication"}},{"value":"The authors declare no competing interests.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"176"}}