{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T21:33:38Z","timestamp":1740173618977,"version":"3.37.3"},"reference-count":68,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62476003","62376002"],"award-info":[{"award-number":["62476003","62376002"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Scientific Research Planning Project of Anhui Province","award":["2022AH050072"],"award-info":[{"award-number":["2022AH050072"]}]},{"name":"Opening Foundation of State Key Laboratory of Cognitive Intelligence, iFLYTEK","award":["iED2022-006"],"award-info":[{"award-number":["iED2022-006"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput. Soc. Syst."],"published-print":{"date-parts":[[2024,12]]},"DOI":"10.1109\/tcss.2024.3451452","type":"journal-article","created":{"date-parts":[[2024,9,17]],"date-time":"2024-09-17T18:53:36Z","timestamp":1726599216000},"page":"7830-7845","source":"Crossref","is-referenced-by-count":0,"title":["ReOP: Generating Transferable Fake Users for Recommendation Systems via Reverse Optimization"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3811-6995","authenticated-orcid":false,"given":"Fulan","family":"Qian","sequence":"first","affiliation":[{"name":"Artificial Intelligence Institute, Anhui University, Anhui, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-7963-8653","authenticated-orcid":false,"given":"Yan","family":"Cui","sequence":"additional","affiliation":[{"name":"Artificial Intelligence Institute, Anhui University, Anhui, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9479-4005","authenticated-orcid":false,"given":"Hai","family":"Chen","sequence":"additional","affiliation":[{"name":"Artificial Intelligence Institute, Anhui University, Anhui, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-5254-8502","authenticated-orcid":false,"given":"Wenbin","family":"Chen","sequence":"additional","affiliation":[{"name":"Artificial Intelligence Institute, Anhui University, Anhui, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6090-910X","authenticated-orcid":false,"given":"Yuanting","family":"Yan","sequence":"additional","affiliation":[{"name":"Artificial Intelligence Institute, Anhui University, Anhui, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7647-3603","authenticated-orcid":false,"given":"Shu","family":"Zhao","sequence":"additional","affiliation":[{"name":"Artificial Intelligence Institute, Anhui University, Anhui, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3379992"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE48307.2020.00021"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380072"},{"article-title":"Pore: Provably robust recommender systems against data poisoning attacks","year":"2023","author":"Jia","key":"ref4"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2023.3274759"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3523227.3546784"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/988672.988726"},{"key":"ref8","first-page":"1","article-title":"Assessing impacts of a power user attack on a matrix factorization collaborative recommender system","volume-title":"Proc. 27th Int. Flairs Conf.","author":"Seminario","year":"2014"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.26483\/ijarcs.v8i7.4550"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24525"},{"article-title":"Adversarial recommendation: Attack of the learned fake users","year":"2018","author":"Christakopoulou","key":"ref11"},{"article-title":"A comprehensive survey on trustworthy recommender systems","year":"2022","author":"Fan","key":"ref12"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3298689.3347031"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3512352"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3183210"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467335"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2021.07.041"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3460231.3474275"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539359"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3181270"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2023.3272652"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3383313.3412243"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467233"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1142\/S2811032322500059"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.3389\/fnins.2022.1094795"},{"article-title":"Improving the transferability of adversarial examples with restructure embedded patches","year":"2022","author":"Zhou","key":"ref26"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2023.3248626"},{"key":"ref28","first-page":"3886","article-title":"On a combination of alternating minimization and nesterov\u2019s momentum","volume-title":"Int. Conf. Mach. Learn.","author":"Guminov","year":"2021"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/0925-2312(93)90006-O"},{"issue":"7","key":"ref30","article-title":"Adaptive subgradient methods for online learning and stochastic optimization.","volume":"12","author":"Duchi","year":"2011","journal-title":"J. Mach. Learn. Res."},{"article-title":"Adam: A method for stochastic optimization","year":"2014","author":"Kingma","key":"ref31"},{"key":"ref32","first-page":"29845","article-title":"Boosting the transferability of adversarial attacks with reverse adversarial perturbation","volume":"35","author":"Qin","year":"2022","journal-title":"Adv. Neur. Inf. Process. Syst."},{"key":"ref33","first-page":"26982","article-title":"Penalizing gradient norm for efficiently improving generalization in deep learning","volume-title":"Int. Conf. Mach. Learn.","author":"Zhao","year":"2022"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.3390\/math10081249"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00789"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00284"},{"article-title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","year":"2019","author":"Lin","key":"ref37"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-7908-2604-3_16"},{"key":"ref40","first-page":"29989","article-title":"Revisiting injective attacks on recommender systems","volume":"35","author":"Li","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274706"},{"key":"ref42","first-page":"1885","article-title":"Data poisoning attacks on factorization-based collaborative filtering","volume":"29","author":"Li","year":"2016","journal-title":"Adv. Neur. Inform. Process. Syst."},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484805"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3411884"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3145690"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3535101"},{"issue":"3","key":"ref47","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3567420","volume":"43","author":"Nguyen","year":"2023","journal-title":"ACM Trans. Inf. Syst."},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2009.263"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-018-9655-x"},{"key":"ref50","first-page":"2408","article-title":"Catch the black sheep: Unified framework for shilling attack detection based on fraudulent action propagation","volume-title":"Proc. 24th Int. Joint Conf. Artif. Intell.","author":"Zhang","year":"2015"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2015.12.137"},{"key":"ref52","first-page":"14848","article-title":"Embedding principle of loss landscape of deep neural networks","volume":"34","author":"Zhang","year":"2021","journal-title":"Adv. Neur. Inf. Process. Syst."},{"article-title":"Flatness-aware adversarial attack","year":"2023","author":"Fan","key":"ref53"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103541"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.3390\/app131810041"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-32-385708-6.00016-3"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICIIP53038.2021.9702632"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3511808.3557425"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/2827872"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/2020408.2020579"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2008.16"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3314578"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3178876.3186150"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/2835776.2835837"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052569"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052639"},{"article-title":"BPR: Bayesian personalized ranking from implicit feedback","year":"2012","author":"Rendle","key":"ref67"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/3677328"}],"container-title":["IEEE Transactions on Computational Social Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6570650\/10772353\/10681321.pdf?arnumber=10681321","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,3]],"date-time":"2024-12-03T19:08:49Z","timestamp":1733252929000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10681321\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12]]},"references-count":68,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tcss.2024.3451452","relation":{},"ISSN":["2329-924X","2373-7476"],"issn-type":[{"type":"electronic","value":"2329-924X"},{"type":"electronic","value":"2373-7476"}],"subject":[],"published":{"date-parts":[[2024,12]]}}}