{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T20:16:56Z","timestamp":1783714616245,"version":"3.55.0"},"reference-count":64,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Special Project of National Natural Science Foundation of China Project","award":["72442017"],"award-info":[{"award-number":["72442017"]}]},{"name":"General Research Funds from the Hong Kong Research Grants Council Project","award":["PolyU 15207322"],"award-info":[{"award-number":["PolyU 15207322"]}]},{"name":"General Research Funds from the Hong Kong Research Grants Council Project","award":["15200023"],"award-info":[{"award-number":["15200023"]}]},{"name":"General Research Funds from the Hong Kong Research Grants Council Project","award":["15206024"],"award-info":[{"award-number":["15206024"]}]},{"name":"General Research Funds from the Hong Kong Research Grants Council Project","award":["15224524"],"award-info":[{"award-number":["15224524"]}]},{"name":"Hong Kong Research Grants Council’s Theme-based Research Scheme","award":["T43-513\/23-N"],"award-info":[{"award-number":["T43-513\/23-N"]}]},{"name":"Hong Kong Research Grants Council’s Research Impact Fund","award":["R1015-23"],"award-info":[{"award-number":["R1015-23"]}]},{"name":"Hong Kong Research Grants Council’s Collaborative Research Fund","award":["C1043-24GF"],"award-info":[{"award-number":["C1043-24GF"]}]},{"name":"Internal research funds from Hong Kong Polytechnic University Project","award":["P0059586"],"award-info":[{"award-number":["P0059586"]}]},{"name":"Internal research funds from Hong Kong Polytechnic University Project","award":["P0042693"],"award-info":[{"award-number":["P0042693"]}]},{"name":"Internal research funds from Hong Kong Polytechnic University Project","award":["P0048625"],"award-info":[{"award-number":["P0048625"]}]},{"name":"Internal research funds from Hong Kong Polytechnic University Project","award":["P0051361"],"award-info":[{"award-number":["P0051361"]}]},{"name":"Sheertek International (HK) Limited"},{"name":"The Centre for Large AI Models (CLAIM) of The Hong Kong Polytechnic University"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Knowl. Data Eng."],"published-print":{"date-parts":[[2026,8]]},"DOI":"10.1109\/tkde.2026.3690651","type":"journal-article","created":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T20:04:20Z","timestamp":1778011460000},"page":"5077-5094","source":"Crossref","is-referenced-by-count":1,"title":["Exploring Backdoor Attack and Defense for LLM-Empowered Recommendations"],"prefix":"10.1109","volume":"38","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6903-8996","authenticated-orcid":false,"given":"Liangbo","family":"Ning","sequence":"first","affiliation":[{"name":"Department of Computing, The Hong Kong Polytechnic University, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4049-1233","authenticated-orcid":false,"given":"Wenqi","family":"Fan","sequence":"additional","affiliation":[{"name":"Department of Computing and the Department of Management and Marketing, The Hong Kong Polytechnic University, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3370-471X","authenticated-orcid":false,"given":"Qing","family":"Li","sequence":"additional","affiliation":[{"name":"Department of Computing, The Hong Kong Polytechnic University, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.52202\/075280-0351"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052627"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2020.3008732"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313488"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2003.1167344"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671470"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/s11280-024-01291-2"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2024.3392335"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3626772.3657690"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1038\/s41591-024-03445-1"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3663529.3663786"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3704725"},{"key":"ref13","article-title":"DeepSeek-V3 technical report","author":"Liu","year":"2024"},{"key":"ref14","article-title":"LLaMA: Open and efficient foundation language models","author":"Touvron","year":"2023"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3182979"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3726871"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1155\/2009\/421425"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2009.263"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052569"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3397271.3401063"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3404835.3462862"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539359"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2023.3272652"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3696105"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3523227.3546767"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3583780.3615017"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/tkde.2025.3599265"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3604915.3608857"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-naacl.39"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3626772.3657821"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3589335.3648307"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-long.318"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671837"},{"key":"ref34","article-title":"LLM-powered text simulation attack against ID-free recommender systems","author":"Wang","year":"2024"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3539618.3591949"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2025\/342"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.52202\/068431-2686"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.naacl-long.171"},{"key":"ref39","article-title":"BadEdit: Backdooring large language models by model editing","volume-title":"Proc. 12th Int. Conf. Learn. Representations","author":"Li","year":"2024"},{"key":"ref40","first-page":"35413","article-title":"Poisoning language models during instruction tuning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Wan","year":"2023"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3711896.3736555"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2005.50"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44886-1_25"},{"key":"ref44","article-title":"Demystifying poisoning backdoor attacks from a statistical perspective","volume-title":"Proc. 12th Int. Conf. Learn. Representations","author":"Wang","year":"2024"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3404835.3462962"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3795521"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3477495.3531937"},{"key":"ref48","article-title":"Certified robustness for large language models with self-denoising","author":"Zhang","year":"2023"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-acl.776"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i4.25656"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.752"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-acl.401"},{"key":"ref54","article-title":"Baseline defenses for adversarial attacks against aligned language models","author":"Jain","year":"2023"},{"key":"ref55","article-title":"A paraphrasing model based on chatGPT paraphrases","author":"Vladimir Vorobev","year":"2023"},{"key":"ref56","first-page":"35","article-title":"The Netflix prize","volume-title":"Proc. KDD Cup Workshop","author":"Bennett","year":"2007"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00412"},{"issue":"1","key":"ref58","first-page":"5485","article-title":"Exploring the limits of transfer learning with a unified text-to-text transformer","volume":"21","author":"Raffel","year":"2020","journal-title":"J. Mach. Learn. Res."},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3539618.3591934"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.acl-long.37"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/n18-1170"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3219826"},{"key":"ref63","article-title":"Learning to discover social circles in ego networks","volume-title":"Proc. Adv. Neural Inf. Proc. Syst.","volume":"25","author":"Leskovec","year":"2012"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1177\/20563051211019004"}],"container-title":["IEEE Transactions on Knowledge and Data Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/69\/11591437\/11506318.pdf?arnumber=11506318","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T19:40:39Z","timestamp":1783712439000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11506318\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8]]},"references-count":64,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tkde.2026.3690651","relation":{},"ISSN":["1041-4347","1558-2191","2326-3865"],"issn-type":[{"value":"1041-4347","type":"print"},{"value":"1558-2191","type":"electronic"},{"value":"2326-3865","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8]]}}}