{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,13]],"date-time":"2026-10-13T17:18:42Z","timestamp":1791911922233,"version":"4.3.4"},"publisher-location":"New York, NY, USA","reference-count":27,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,9,10]],"date-time":"2019-09-10T00:00:00Z","timestamp":1568073600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"IIS","award":["0953274"],"award-info":[{"award-number":["0953274"]}]},{"name":"NNX","award":["12AQ39A"],"award-info":[{"award-number":["12AQ39A"]}]},{"DOI":"10.13039\/100001017","name":"California Community Foundation","doi-asserted-by":"publisher","award":["1451986"],"award-info":[{"award-number":["1451986"]}],"id":[{"id":"10.13039\/100001017","id-type":"DOI","asserted-by":"publisher"}]},{"name":"CNS","award":["1314560"],"award-info":[{"award-number":["1314560"]}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["IIS-1563950"],"award-info":[{"award-number":["IIS-1563950"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000145","name":"Division of Information and Intelligent Systems","doi-asserted-by":"publisher","award":["1447566"],"award-info":[{"award-number":["1447566"]}],"id":[{"id":"10.13039\/100000145","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,9,10]]},"DOI":"10.1145\/3298689.3347031","type":"proceedings-article","created":{"date-parts":[[2019,9,11]],"date-time":"2019-09-11T13:21:31Z","timestamp":1568208091000},"page":"322-330","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":95,"title":["Adversarial attacks on an oblivious recommender"],"prefix":"10.1145","author":[{"given":"Konstantina","family":"Christakopoulou","sequence":"first","affiliation":[{"name":"Google Inc. and University of Minnesota"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Arindam","family":"Banerjee","sequence":"additional","affiliation":[{"name":"University of Minnesota"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2019,9,10]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Alekh Agarwal Ofer Dekel and Lin Xiao. 2010. Optimal Algorithms for Online Convex Optimization with Multi-Point Bandit Feedback. In COLT. Citeseer 28--40.  Alekh Agarwal Ofer Dekel and Lin Xiao. 2010. Optimal Algorithms for Online Convex Optimization with Multi-Point Bandit Feedback. In COLT . Citeseer 28--40."},{"key":"e_1_3_2_1_2_1","volume-title":"Recommender Systems","author":"Aggarwal Charu C","unstructured":"Charu C Aggarwal . 2016. Attack-resistant recommender systems . In Recommender Systems . Springer , 385--410. Charu C Aggarwal. 2016. Attack-resistant recommender systems. In Recommender Systems. Springer, 385--410."},{"key":"e_1_3_2_1_3_1","volume-title":"Stochastic recursive algorithms for optimization: simultaneous perturbation methods","author":"Bhatnagar Shalabh","unstructured":"Shalabh Bhatnagar , HL Prasad , and LA Prashanth . 2012. Stochastic recursive algorithms for optimization: simultaneous perturbation methods . Vol. 434 . Springer . Shalabh Bhatnagar, HL Prasad, and LA Prashanth. 2012. Stochastic recursive algorithms for optimization: simultaneous perturbation methods. Vol. 434. Springer."},{"key":"e_1_3_2_1_4_1","volume-title":"Recommender systems handbook","author":"Burke Robin","unstructured":"Robin Burke , Michael P O\u00ef £¡Mahony, and Neil J Hurley . 2015. Robust collaborative recommendation . In Recommender systems handbook . Springer , 961--995. Robin Burke, Michael P O\u00ef£¡Mahony, and Neil J Hurley. 2015. Robust collaborative recommendation. In Recommender systems handbook. Springer, 961--995."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3269206.3271743"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2015.2409256"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274706"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3134599"},{"key":"e_1_3_2_1_9_1","unstructured":"Ian Goodfellow Nicolas Papernot Patrick McDaniel R Feinman F Faghri A Matyasko K Hambardzumyan YL Juang A Kurakin R Sheatsley etal 2016. cleverhans v0. 1: an adversarial machine learning library. arXiv preprint (2016).  Ian Goodfellow Nicolas Papernot Patrick McDaniel R Feinman F Faghri A Matyasko K Hambardzumyan YL Juang A Kurakin R Sheatsley et al. 2016. cleverhans v0. 1: an adversarial machine learning library. arXiv preprint (2016)."},{"key":"e_1_3_2_1_10_1","unstructured":"Ian Goodfellow Jean Pouget-Abadie Mehdi Mirza Bing Xu David Warde-Farley Sherjil Ozair Aaron Courville and Yoshua Bengio. 2014. Generative adversarial nets. In NIPS. 2672--2680.   Ian Goodfellow Jean Pouget-Abadie Mehdi Mirza Bing Xu David Warde-Farley Sherjil Ozair Aaron Courville and Yoshua Bengio. 2014. Generative adversarial nets. In NIPS . 2672--2680."},{"key":"e_1_3_2_1_11_1","volume-title":"Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572","author":"Goodfellow Ian J","year":"2014","unstructured":"Ian J Goodfellow , Jonathon Shlens , and Christian Szegedy . 2014. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 ( 2014 ). Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. 2014. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1162\/106365601750190398"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2827872"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3209978.3209981"},{"key":"e_1_3_2_1_15_1","volume-title":"Visually-aware fashion recommendation and design with generative image models","author":"Kang Wang-Cheng","unstructured":"Wang-Cheng Kang , Chen Fang , Zhaowen Wang , and Julian McAuley . 2017. Visually-aware fashion recommendation and design with generative image models . In ICDM. IEEE , 207--216. Wang-Cheng Kang, Chen Fang, Zhaowen Wang, and Julian McAuley. 2017. Visually-aware fashion recommendation and design with generative image models. In ICDM. IEEE, 207--216."},{"key":"e_1_3_2_1_16_1","unstructured":"Bo Li Yining Wang Aarti Singh and Yevgeniy Vorobeychik. 2016. Data poisoning attacks on factorization-based collaborative filtering. In NIPS. 1885--1893.   Bo Li Yining Wang Aarti Singh and Yevgeniy Vorobeychik. 2016. Data poisoning attacks on factorization-based collaborative filtering. In NIPS . 1885--1893."},{"key":"e_1_3_2_1_17_1","unstructured":"Andriy Mnih and Ruslan R Salakhutdinov. 2008. Probabilistic matrix factorization. In NIPS. 1257--1264.   Andriy Mnih and Ruslan R Salakhutdinov. 2008. Probabilistic matrix factorization. In NIPS . 1257--1264."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1278366.1278372"},{"key":"e_1_3_2_1_19_1","volume-title":"Universal adversarial perturbations. arXiv preprint arXiv:1610.08401","author":"Moosavi-Dezfooli Seyed-Mohsen","year":"2016","unstructured":"Seyed-Mohsen Moosavi-Dezfooli , Alhussein Fawzi , Omar Fawzi , and Pascal Frossard . 2016. Universal adversarial perturbations. arXiv preprint arXiv:1610.08401 ( 2016 ). Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi, and Pascal Frossard. 2016. Universal adversarial perturbations. arXiv preprint arXiv:1610.08401 (2016)."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"crossref","unstructured":"Seyed-Mohsen Moosavi-Dezfooli Alhussein Fawzi and Pascal Frossard. 2016. Deepfool: a simple and accurate method to fool deep neural networks. In CVPR. 2574--2582.  Seyed-Mohsen Moosavi-Dezfooli Alhussein Fawzi and Pascal Frossard. 2016. Deepfool: a simple and accurate method to fool deep neural networks. In CVPR . 2574--2582.","DOI":"10.1109\/CVPR.2016.282"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1031114.1031116"},{"key":"e_1_3_2_1_22_1","volume-title":"Promoting recommendations: An attack on collaborative filtering","author":"O\u00e2\u0102 Michael P","unstructured":"Michael P O\u00e2\u0102 ŹMahony, Neil J Hurley , and Guenole CM Silvestre . 2002. Promoting recommendations: An attack on collaborative filtering . In DEXA. Springer , 494--503. Michael P O\u00e2\u0102ŹMahony, Neil J Hurley, and Guenole CM Silvestre. 2002. Promoting recommendations: An attack on collaborative filtering. In DEXA. Springer, 494--503."},{"key":"e_1_3_2_1_23_1","volume-title":"Towards the science of security and privacy in machine learning. arXiv preprint arXiv:1611.03814","author":"Papernot Nicolas","year":"2016","unstructured":"Nicolas Papernot , Patrick McDaniel , Arunesh Sinha , and Michael Wellman . 2016. Towards the science of security and privacy in machine learning. arXiv preprint arXiv:1611.03814 ( 2016 ). Nicolas Papernot, Patrick McDaniel, Arunesh Sinha, and Michael Wellman. 2016. Towards the science of security and privacy in machine learning. arXiv preprint arXiv:1611.03814 (2016)."},{"key":"e_1_3_2_1_24_1","volume-title":"Unsupervised representation learning with deep convolutional generative adversarial networks. arXiv preprint arXiv:1511.06434","author":"Radford Alec","year":"2015","unstructured":"Alec Radford , Luke Metz , and Soumith Chintala . 2015. Unsupervised representation learning with deep convolutional generative adversarial networks. arXiv preprint arXiv:1511.06434 ( 2015 ). Alec Radford, Luke Metz, and Soumith Chintala. 2015. Unsupervised representation learning with deep convolutional generative adversarial networks. arXiv preprint arXiv:1511.06434 (2015)."},{"key":"e_1_3_2_1_25_1","volume-title":"Danilo Vasconcellos Vargas, and Sakurai Kouichi","author":"Su Jiawei","year":"2017","unstructured":"Jiawei Su , Danilo Vasconcellos Vargas, and Sakurai Kouichi . 2017 . One pixel attack for fooling deep neural networks. arXiv preprint arXiv:1710.08864 (2017). Jiawei Su, Danilo Vasconcellos Vargas, and Sakurai Kouichi. 2017. One pixel attack for fooling deep neural networks. arXiv preprint arXiv:1710.08864 (2017)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3077136.3080786"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3220078"}],"event":{"name":"RecSys '19: Thirteenth ACM Conference on Recommender Systems","location":"Copenhagen Denmark","acronym":"RecSys '19"},"container-title":["Proceedings of the 13th ACM Conference on Recommender Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3298689.3347031","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3298689.3347031","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3298689.3347031","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:12:55Z","timestamp":1750201975000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3298689.3347031"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,9,10]]},"references-count":27,"alternative-id":["10.1145\/3298689.3347031","10.1145\/3298689"],"URL":"https:\/\/doi.org\/10.1145\/3298689.3347031","relation":{},"subject":[],"published":{"date-parts":[[2019,9,10]]},"assertion":[{"value":"2019-09-10","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}