{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:47:30Z","timestamp":1783439250221,"version":"3.54.6"},"reference-count":59,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2019,3,1]],"date-time":"2019-03-01T00:00:00Z","timestamp":1551398400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,3,1]],"date-time":"2019-03-01T00:00:00Z","timestamp":1551398400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,3,1]],"date-time":"2019-03-01T00:00:00Z","timestamp":1551398400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"publisher","award":["FL-170100117"],"award-info":[{"award-number":["FL-170100117"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"publisher","award":["DP-180103424"],"award-info":[{"award-number":["DP-180103424"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"publisher","award":["LP-150100671"],"award-info":[{"award-number":["LP-150100671"]}],"id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Shenzhen Key Laboratory","award":["ZDSYS201605101739178"],"award-info":[{"award-number":["ZDSYS201605101739178"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61772508"],"award-info":[{"award-number":["61772508"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1713213"],"award-info":[{"award-number":["U1713213"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Guangdong Technology","award":["2016B010108010"],"award-info":[{"award-number":["2016B010108010"]}]},{"name":"Guangdong Technology","award":["2016B010125003"],"award-info":[{"award-number":["2016B010125003"]}]},{"name":"Shenzhen Technology Project","award":["JSGG20160331185256983"],"award-info":[{"award-number":["JSGG20160331185256983"]}]},{"name":"CAS Key Technology Talent Program, Shenzhen Engineering Laboratory for 3D Content Generating Technologies","award":["[2017]476"],"award-info":[{"award-number":["[2017]476"]}]},{"name":"Key Laboratory of Human-Machine Intelligence-Synergy Systems, Shenzhen Institutes of Advanced Technology, Chinese Academy of Sciences","award":["2014DP173025"],"award-info":[{"award-number":["2014DP173025"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Multimedia"],"published-print":{"date-parts":[[2019,3]]},"DOI":"10.1109\/tmm.2018.2887018","type":"journal-article","created":{"date-parts":[[2018,12,14]],"date-time":"2018-12-14T21:29:10Z","timestamp":1544822950000},"page":"555-565","source":"Crossref","is-referenced-by-count":56,"title":["Enhancing the Robustness of Neural Collaborative Filtering Systems Under Malicious Attacks"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5683-2621","authenticated-orcid":false,"given":"Yali","family":"Du","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0793-9187","authenticated-orcid":false,"given":"Meng","family":"Fang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jinfeng","family":"Yi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4756-0609","authenticated-orcid":false,"given":"Chang","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3131-3275","authenticated-orcid":false,"given":"Jun","family":"Cheng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7225-5449","authenticated-orcid":false,"given":"Dacheng","family":"Tao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/1273496.1273596"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2740908.2742726"},{"key":"ref33","article-title":"Provable inductive matrix completion","author":"jain","year":"2013","journal-title":"arXiv 1306 0626"},{"key":"ref32","first-page":"1257","article-title":"Probabilistic matrix factorization","author":"salakhutdinov","year":"0","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1571941.1571979"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1390156.1390267"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2623330.2623672"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2018.8622231"},{"key":"ref35","first-page":"3447","article-title":"Matrix completion with noisy side information","author":"chiang","year":"0","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref34","first-page":"1400","article-title":"Semi-supervised clustering by input pattern assisted pairwise similarity matrix completion","author":"yi","year":"0","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/1102351.1102441"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TASE.2018.2858290"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2017\/224"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2017.2688928"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2016.2635589"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2013.2249572"},{"key":"ref22","article-title":"Distilling the knowledge in a neural network","author":"hinton","year":"2015","journal-title":"ArXiv 1503 02531"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2012.160"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298868"},{"key":"ref23","article-title":"Fitnets: Hints for thin deep nets","author":"romero","year":"2014","journal-title":"arXiv 1412 6550"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2003.1167344"},{"key":"ref25","article-title":"Towards robust neural networks via random self-ensemble","author":"liu","year":"2017","journal-title":"arXiv 1712 00673"},{"key":"ref50","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","author":"athalye","year":"2018","journal-title":"arXiv 1802 00420"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1561\/2200000006"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/2806416.2806504"},{"key":"ref58","first-page":"452","article-title":"BPR: Bayesian personalized ranking from implicit feedback","author":"rendle","year":"0","journal-title":"Proc 25th Conf Uncertainty Artif Intell"},{"key":"ref57","first-page":"265","article-title":"Tensorflow: A system for large-scale machine learning","author":"abadi","year":"0","journal-title":"Proc 10th USENIX Conf Oper Syst Des Implementation"},{"key":"ref56","article-title":"Keras","author":"chollet","year":"2015"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/2827872"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/BF02551274"},{"key":"ref53","first-page":"226","article-title":"Knowledge matters: Importance of prior information for optimization","volume":"17","author":"g\u00fcl\u00e7ehre","year":"2016","journal-title":"J Mach Learn Res"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2016.2563981"},{"key":"ref10","article-title":"Graph convolutional matrix completion","author":"van den berg","year":"2017","journal-title":"arXiv 1706 02263"},{"key":"ref11","first-page":"764","article-title":"A neural autoregressive approach to collaborative filtering","author":"zheng","year":"0","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref40","first-page":"86","article-title":"Robustness and accuracy tradeoffs for recommender systems under attack.","author":"seminario","year":"0","journal-title":"Proc Florida Artif Intell Res Soc Conf"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2017.2655449"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2017.8057106"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2015.7180506"},{"key":"ref15","first-page":"1885","article-title":"Data poisoning attacks on factorization-based collaborative filtering","author":"li","year":"0","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref16","first-page":"494","article-title":"Promoting recommendations: An attack on collaborative filtering","author":"o\u2019mahony","year":"0","journal-title":"Proc Int Conf Database Expert Syst Appl"},{"key":"ref17","first-page":"13","article-title":"Effective attack models for shilling item-based collaborative filtering systems","volume":"2005","author":"mobasher","year":"0","journal-title":"Proc WEBKDD Workshop"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/988672.988726"},{"key":"ref19","first-page":"873","article-title":"Robust matrix completion and corrupted columns","author":"chen","year":"0","journal-title":"Proc 28th Int Conf Mach Learn"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2507157.2507163"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2017.2781364"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2009.263"},{"key":"ref5","first-page":"1","article-title":"The netflix prize","author":"bennett","year":"0","journal-title":"Proc KDD Cup Workshop"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2783258.2783273"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2017\/223"},{"key":"ref49","first-page":"10","article-title":"EAD: Elastic-net attacks to deep neural networks via adversarial examples","author":"chen","year":"0","journal-title":"Proc AAAI"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052569"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/298"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref48","article-title":"Towards deep learning models resistant to adversarial attacks","author":"madry","year":"2017","journal-title":"arXiv 1706 06083"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref42","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014","journal-title":"arXiv 1412 6572"},{"key":"ref41","first-page":"1","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"0","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref44","first-page":"13","article-title":"Towards query efficient black-box attacks: An input-free perspective","author":"du","year":"0","journal-title":"Proc 11th ACM Workshop Artif Intell Sec"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"}],"container-title":["IEEE Transactions on Multimedia"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6046\/8649843\/08576563.pdf?arnumber=8576563","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T21:06:35Z","timestamp":1657746395000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8576563\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,3]]},"references-count":59,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tmm.2018.2887018","relation":{},"ISSN":["1520-9210","1941-0077"],"issn-type":[{"value":"1520-9210","type":"print"},{"value":"1941-0077","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,3]]}}}