{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T20:11:17Z","timestamp":1778271077666,"version":"3.51.4"},"reference-count":44,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100005064","name":"Hebei Province Science and Technology Support Program","doi-asserted-by":"publisher","award":["236Z0103G"],"award-info":[{"award-number":["236Z0103G"]}],"id":[{"id":"10.13039\/501100005064","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62102348"],"award-info":[{"award-number":["62102348"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003787","name":"Hebei Provincial Natural Science Foundation","doi-asserted-by":"publisher","award":["F2022203012"],"award-info":[{"award-number":["F2022203012"]}],"id":[{"id":"10.13039\/501100003787","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Information Sciences"],"published-print":{"date-parts":[[2026,8]]},"DOI":"10.1016\/j.ins.2026.123431","type":"journal-article","created":{"date-parts":[[2026,3,28]],"date-time":"2026-03-28T07:25:53Z","timestamp":1774682753000},"page":"123431","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Disruptive yet stealthy: Revealing vulnerabilities in QoS-aware cloud API recommender systems via surrogate diffusion poisoning"],"prefix":"10.1016","volume":"746","author":[{"given":"Zhen","family":"Chen","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-2448-3679","authenticated-orcid":false,"given":"Zeyu","family":"Tan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-9066-8424","authenticated-orcid":false,"given":"Zijia","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-8220-3863","authenticated-orcid":false,"given":"Wei","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2687-2280","authenticated-orcid":false,"given":"Jiayin","family":"Feng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/j.ins.2026.123431_bib0005","series-title":"2024 15th International Conference on Computing Communication and Networking Technologies (ICCCNT)","first-page":"1","article-title":"Comparative analysis of cloud platform: Amazon Web Service, Microsoft Azure, and Google cloud provider: a review","author":"Gohil","year":"2024"},{"issue":"6","key":"10.1016\/j.ins.2026.123431_bib0010","first-page":"14","article-title":"A correlation graph based approach for personalized and compatible web apis recommendation in mobile app development","volume":"35","author":"Qi","year":"2023","journal-title":"IEEE Trans. Autom. Control"},{"key":"10.1016\/j.ins.2026.123431_bib0015","series-title":"Cloud Api Market Research Report Information by End User, by Vertical and by Region \u2013 Market Forecast Till 2032","author":"Gupta","year":"2025"},{"issue":"6","key":"10.1016\/j.ins.2026.123431_bib0020","doi-asserted-by":"crossref","first-page":"14231","DOI":"10.1007\/s10586-018-2279-8","article-title":"A design of intelligent QOS aware web service recommendation system","volume":"22","author":"Anithadevi","year":"2019","journal-title":"Cluster Comput."},{"issue":"1","key":"10.1016\/j.ins.2026.123431_bib0025","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3677328","article-title":"Manipulating recommender systems: a survey of poisoning attacks and countermeasures","volume":"57","author":"Nguyen","year":"2024","journal-title":"ACM Comput. Surv."},{"key":"10.1016\/j.ins.2026.123431_bib0030","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2023.121630","article-title":"Poisoning qos-aware cloud API recommender system with generative adversarial network attack","volume":"238","author":"Chen","year":"2024","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.ins.2026.123431_bib0035","series-title":"Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","first-page":"3311","article-title":"Unveiling vulnerabilities of contrastive recommender systems to poisoning attacks","author":"Wang","year":"2024"},{"key":"10.1016\/j.ins.2026.123431_bib0040","doi-asserted-by":"crossref","first-page":"4788","DOI":"10.1109\/TIFS.2021.3117078","article-title":"Attacking recommender systems with plausible profile","volume":"16","author":"Zhang","year":"2021","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.ins.2026.123431_bib0045","article-title":"Latent diffusion model-based data poisoning attack against qos-aware cloud API recommender system","author":"Chen","year":"2025","journal-title":"Comput. Netw."},{"key":"10.1016\/j.ins.2026.123431_bib0050","series-title":"IEEE International Conference on Web Services (Icws 2007)","first-page":"439","article-title":"Personalized QOS prediction forweb services via collaborative filtering","author":"Shao","year":"2007"},{"issue":"2","key":"10.1016\/j.ins.2026.123431_bib0055","doi-asserted-by":"crossref","first-page":"140","DOI":"10.1109\/TSC.2010.52","article-title":"Qos-aware web service recommendation by collaborative filtering","volume":"4","author":"Zheng","year":"2010","journal-title":"IEEE Trans. Serv. Comput."},{"issue":"5","key":"10.1016\/j.ins.2026.123431_bib0060","doi-asserted-by":"crossref","first-page":"455","DOI":"10.1007\/s00607-019-00708-5","article-title":"A location-sensitive and network-aware broker for recommending web services","volume":"101","author":"Saeed","year":"2019","journal-title":"Computing"},{"issue":"3","key":"10.1016\/j.ins.2026.123431_bib0065","doi-asserted-by":"crossref","first-page":"289","DOI":"10.1109\/TSC.2011.59","article-title":"Collaborative web service QOS prediction via neighborhood integrated matrix factorization","volume":"6","author":"Zheng","year":"2012","journal-title":"IEEE Trans. Serv. Comput."},{"key":"10.1016\/j.ins.2026.123431_bib0070","doi-asserted-by":"crossref","first-page":"669","DOI":"10.1016\/j.future.2017.06.020","article-title":"Collaborative QOS prediction with context-sensitive matrix factorization","volume":"82","author":"Wu","year":"2018","journal-title":"Futur. Gener. Comput. Syst."},{"key":"10.1016\/j.ins.2026.123431_bib0075","doi-asserted-by":"crossref","first-page":"68","DOI":"10.1016\/j.ins.2013.12.007","article-title":"Colbar: a collaborative location-based regularization framework for QOS prediction","volume":"265","author":"Yin","year":"2014","journal-title":"Inf. Sci."},{"issue":"5","key":"10.1016\/j.ins.2026.123431_bib0080","doi-asserted-by":"crossref","first-page":"1264","DOI":"10.1109\/TSC.2018.2876532","article-title":"A location-based factorization machine model for web service QOS prediction","volume":"14","author":"Yang","year":"2018","journal-title":"IEEE Trans. Serv. Comput."},{"issue":"6","key":"10.1016\/j.ins.2026.123431_bib0085","doi-asserted-by":"crossref","first-page":"3796","DOI":"10.1109\/TSMC.2019.2931723","article-title":"Location-aware deep collaborative filtering for service recommendation","volume":"51","author":"Zhang","year":"2019","journal-title":"IEEE Trans. Syst. Man Cybern. Syst."},{"issue":"5","key":"10.1016\/j.ins.2026.123431_bib0090","doi-asserted-by":"crossref","first-page":"4532","DOI":"10.1109\/JIOT.2019.2956827","article-title":"Context-aware QOS prediction with neural collaborative filtering for internet-of-things services","volume":"7","author":"Gao","year":"2019","journal-title":"IEEE Internet Things J."},{"issue":"7","key":"10.1016\/j.ins.2026.123431_bib0095","doi-asserted-by":"crossref","first-page":"1538","DOI":"10.1109\/TPDS.2021.3116865","article-title":"Topology-aware neural model for highly accurate QOS prediction","volume":"33","author":"Li","year":"2021","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"issue":"5","key":"10.1016\/j.ins.2026.123431_bib0100","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3708982","article-title":"Privacy-preserved and responsible recommenders: from conventional defense to federated learning and blockchain","volume":"57","author":"Ali","year":"2025","journal-title":"ACM Comput. Surv."},{"issue":"3","key":"10.1016\/j.ins.2026.123431_bib0105","doi-asserted-by":"crossref","first-page":"1227","DOI":"10.1109\/TKDE.2024.3522763","article-title":"Hidattack: an effective and undetectable model poisoning attack to federated recommenders","volume":"37","author":"Ali","year":"2025","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"10.1016\/j.ins.2026.123431_bib0110","series-title":"Proceedings of the 47th International ACM SIGIR Conference on Research and Development in Information Retrieval","first-page":"1733","article-title":"Lorec: combating poisons with large language model for robust sequential recommendation","author":"Zhang","year":"2024"},{"key":"10.1016\/j.ins.2026.123431_bib0115","series-title":"2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","first-page":"2115","article-title":"A dual defense design against data poisoning attacks in deep learning-based recommendation systems","author":"Dang","year":"2024"},{"key":"10.1016\/j.ins.2026.123431_bib0120","series-title":"Proceedings of the 13th International Conference on World Wide Web","first-page":"393","article-title":"Shilling recommender systems for fun and profit","author":"Lam","year":"2004"},{"key":"10.1016\/j.ins.2026.123431_bib0125","doi-asserted-by":"crossref","first-page":"767","DOI":"10.1007\/s10462-012-9364-9","article-title":"Shilling attacks against recommender systems: a comprehensive survey","volume":"42","author":"Gunes","year":"2014","journal-title":"Artif. Intell. Rev."},{"key":"10.1016\/j.ins.2026.123431_bib0130","series-title":"Proceedings of the 34th Annual Computer Security Applications Conference","first-page":"381","article-title":"Poisoning attacks to graph-based recommender systems","author":"Fang","year":"2018"},{"key":"10.1016\/j.ins.2026.123431_bib0135","series-title":"Proceedings of the 13th ACM Conference on Recommender Systems","first-page":"322","article-title":"Adversarial attacks on an oblivious recommender","author":"Christakopoulou","year":"2019"},{"key":"10.1016\/j.ins.2026.123431_bib0140","doi-asserted-by":"crossref","first-page":"683","DOI":"10.1016\/j.ins.2021.07.041","article-title":"Ready for emerging threats to recommender systems? A graph convolution-based generative shilling attack","volume":"578","author":"Wu","year":"2021","journal-title":"Inf. Sci."},{"key":"10.1016\/j.ins.2026.123431_bib0145","series-title":"2020 IEEE 36th International Conference on Data Engineering (ICDE)","first-page":"157","article-title":"Poisonrec: an adaptive data poisoning framework for attacking black-box recommender systems","author":"Song","year":"2020"},{"issue":"6","key":"10.1016\/j.ins.2026.123431_bib0150","first-page":"1","article-title":"Adversarial item promotion on visually-aware recommender systems by guided diffusion","volume":"42","author":"Chen","year":"2024","journal-title":"ACM Trans. Inf. Syst."},{"key":"10.1016\/j.ins.2026.123431_bib0155","author":"Yuan"},{"key":"10.1016\/j.ins.2026.123431_bib0160","author":"Qiao"},{"key":"10.1016\/j.ins.2026.123431_bib0165","doi-asserted-by":"crossref","first-page":"33353","DOI":"10.1109\/ACCESS.2018.2848210","article-title":"Learning sparse representation with variational auto-encoder for anomaly detection","volume":"6","author":"Sun","year":"2018","journal-title":"IEEE Access"},{"issue":"4","key":"10.1016\/j.ins.2026.123431_bib0170","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3626235","article-title":"Diffusion models: a comprehensive survey of methods and applications","volume":"56","author":"Yang","year":"2023","journal-title":"ACM Comput. Surv."},{"issue":"4","key":"10.1016\/j.ins.2026.123431_bib0175","doi-asserted-by":"crossref","first-page":"567","DOI":"10.1177\/0165551516654354","article-title":"Collaborative filtering using non-negative matrix factorisation","volume":"43","author":"Aghdam","year":"2017","journal-title":"J. Inf. Sci."},{"key":"10.1016\/j.ins.2026.123431_bib0180","series-title":"Advances in Neural Information Processing Systems","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume":"vol. 33","author":"Ho","year":"2020"},{"key":"10.1016\/j.ins.2026.123431_bib0185","article-title":"Improved training of Wasserstein Gans","volume":"30","author":"Gulrajani","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"issue":"3","key":"10.1016\/j.ins.2026.123431_bib0190","first-page":"174","article-title":"Poisoning attack on quality of service aware cloud API recommender system via surrogate generative adversarial network","volume":"46","author":"Chen","year":"2025","journal-title":"J. Commun.\/Tongxin Xuebao"},{"issue":"1","key":"10.1016\/j.ins.2026.123431_bib0195","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1644873.1644874","article-title":"Factor in the neighbors: scalable and accurate collaborative filtering","volume":"4","author":"Koren","year":"2010","journal-title":"ACM Trans. Knowl. Discov. Data"},{"issue":"6","key":"10.1016\/j.ins.2026.123431_bib0200","doi-asserted-by":"crossref","first-page":"1411","DOI":"10.3233\/IDA-230575","article-title":"Unsupervised contaminated user profile identification against shilling attack in recommender system","volume":"28","author":"Zhang","year":"2024","journal-title":"Intell. Data Anal."},{"issue":"6","key":"10.1016\/j.ins.2026.123431_bib0205","doi-asserted-by":"crossref","first-page":"1239","DOI":"10.1587\/transinf.2021EDL8094","article-title":"Detection of trust shilling attacks in recommender systems","volume":"105","author":"Chen","year":"2022","journal-title":"IEICE Trans. Inf. Syst."},{"key":"10.1016\/j.ins.2026.123431_bib0210","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2021.102390","article-title":"Semi-supervised recommendation attack detection based on co-forest","volume":"109","author":"Zhou","year":"2021","journal-title":"Comput. Secur."},{"key":"10.1016\/j.ins.2026.123431_bib0215","series-title":"International Conference on Frontiers in Computing and Systems","first-page":"51","article-title":"Enhancing Popsad: a new approach to shilling attack detection in collaborative recommenders","author":"Shende","year":"2023"},{"issue":"25","key":"10.1016\/j.ins.2026.123431_bib0220","first-page":"723","article-title":"A kernel two-sample test","volume":"13","author":"Gretton","year":"2012","journal-title":"J. Mach. Learn. Res."}],"container-title":["Information Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0020025526003622?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0020025526003622?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T19:10:55Z","timestamp":1778267455000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0020025526003622"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8]]},"references-count":44,"alternative-id":["S0020025526003622"],"URL":"https:\/\/doi.org\/10.1016\/j.ins.2026.123431","relation":{},"ISSN":["0020-0255"],"issn-type":[{"value":"0020-0255","type":"print"}],"subject":[],"published":{"date-parts":[[2026,8]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Disruptive yet stealthy: Revealing vulnerabilities in QoS-aware cloud API recommender systems via surrogate diffusion poisoning","name":"articletitle","label":"Article Title"},{"value":"Information Sciences","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.ins.2026.123431","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Inc. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"123431"}}