{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T17:31:10Z","timestamp":1783791070016,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":52,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,19]],"date-time":"2020-10-19T00:00:00Z","timestamp":1603065600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100014857","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972328"],"award-info":[{"award-number":["61972328"]}],"id":[{"id":"10.13039\/501100014857","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,19]]},"DOI":"10.1145\/3340531.3411884","type":"proceedings-article","created":{"date-parts":[[2020,10,19]],"date-time":"2020-10-19T06:18:51Z","timestamp":1603088331000},"page":"855-864","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":77,"title":["Attacking Recommender Systems with Augmented User Profiles"],"prefix":"10.1145","author":[{"given":"Chen","family":"Lin","sequence":"first","affiliation":[{"name":"Xiamen University, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Si","family":"Chen","sequence":"additional","affiliation":[{"name":"Xiamen University, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hui","family":"Li","sequence":"additional","affiliation":[{"name":"Xiamen University, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanghua","family":"Xiao","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lianyun","family":"Li","sequence":"additional","affiliation":[{"name":"Xiamen University, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qian","family":"Yang","sequence":"additional","affiliation":[{"name":"Xiamen University, Xiamen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,10,19]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.5555\/2931100"},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1360\/N112017-00112"},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.40"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-012-9364-9"},{"key":"e_1_3_2_2_5_1","first-page":"1885","volume-title":"NIPS","author":"Li Bo","year":"2016","unstructured":"Bo Li , Yining Wang , Aarti Singh , and Yevgeniy Vorobeychik . Data poisoning attacks on factorization-based collaborative filtering . In NIPS , pages 1885 -- 1893 , 2016 . Bo Li, Yining Wang, Aarti Singh, and Yevgeniy Vorobeychik. Data poisoning attacks on factorization-based collaborative filtering. In NIPS, pages 1885--1893, 2016."},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2005.127"},{"key":"e_1_3_2_2_7_1","first-page":"671","volume-title":"USENIX Security Symposium","author":"Xing Xinyu","year":"2013","unstructured":"Xinyu Xing , Wei Meng , Dan Doozan , Alex C. Snoeren , Nick Feamster , and Wenke Lee . Take this personally: Pollution attacks on personalized services . In USENIX Security Symposium , pages 671 -- 686 , 2013 . Xinyu Xing, Wei Meng, Dan Doozan, Alex C. Snoeren, Nick Feamster, and Wenke Lee. Take this personally: Pollution attacks on personalized services. In USENIX Security Symposium, pages 671--686, 2013."},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23020"},{"key":"e_1_3_2_2_9_1","first-page":"393","volume-title":"WWW","author":"Shyong","year":"2004","unstructured":"Shyong K. Lam and John Riedl. Shilling recommender systems for fun and profit . In WWW , pages 393 -- 402 , 2004 . Shyong K. Lam and John Riedl. Shilling recommender systems for fun and profit. In WWW, pages 393--402, 2004."},{"key":"e_1_3_2_2_10_1","volume-title":"Adversarial attacks and defences: A survey. arXiv Preprint","author":"Chakraborty Anirban","year":"2018","unstructured":"Anirban Chakraborty , Manaar Alam , Vishal Dey , Anupam Chattopadhyay , and Debdeep Mukhopadhyay . Adversarial attacks and defences: A survey. arXiv Preprint , 2018 . URL https:\/\/arxiv.org\/abs\/1810.00069. Anirban Chakraborty, Manaar Alam, Vishal Dey, Anupam Chattopadhyay, and Debdeep Mukhopadhyay. Adversarial attacks and defences: A survey. arXiv Preprint, 2018. URL https:\/\/arxiv.org\/abs\/1810.00069."},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1316"},{"issue":"2","key":"e_1_3_2_2_14_1","first-page":"3","article-title":"A survey of collaborative recommendation and the robustness of model-based algorithms","volume":"31","author":"Sandvig Jeff J.","year":"2008","unstructured":"Jeff J. Sandvig , Bamshad Mobasher , and Robin D. Burke . A survey of collaborative recommendation and the robustness of model-based algorithms . IEEE Data Eng. Bull. , 31 ( 2 ): 3 -- 13 , 2008 . Jeff J. Sandvig, Bamshad Mobasher, and Robin D. Burke. A survey of collaborative recommendation and the robustness of model-based algorithms. IEEE Data Eng. Bull., 31 (2): 3--13, 2008.","journal-title":"IEEE Data Eng. Bull."},{"key":"e_1_3_2_2_15_1","volume-title":"Adversarial recommendation: Attack of the learned fake users. arXiv Preprint","author":"Christakopoulou Konstantina","year":"2018","unstructured":"Konstantina Christakopoulou and Arindam Banerjee . Adversarial recommendation: Attack of the learned fake users. arXiv Preprint , 2018 . URL https:\/\/arxiv.org\/abs\/1809.08336. Konstantina Christakopoulou and Arindam Banerjee. Adversarial recommendation: Attack of the learned fake users. arXiv Preprint, 2018. URL https:\/\/arxiv.org\/abs\/1809.08336."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3298689.3347031"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1278366.1278372"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3285029"},{"key":"e_1_3_2_2_19_1","first-page":"2672","volume-title":"NIPS","author":"Goodfellow Ian J.","year":"2014","unstructured":"Ian J. Goodfellow , Jean Pouget-Abadie , Mehdi Mirza , Bing Xu , David Warde-Farley , Sherjil Ozair , Aaron C. Courville , and Yoshua Bengio . Generative adversarial nets . In NIPS , pages 2672 -- 2680 , 2014 . Ian J. Goodfellow, Jean Pouget-Abadie, Mehdi Mirza, Bing Xu, David Warde-Farley, Sherjil Ozair, Aaron C. Courville, and Yoshua Bengio. Generative adversarial nets. In NIPS, pages 2672--2680, 2014."},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3035918.3064009"},{"key":"e_1_3_2_2_21_1","first-page":"173","volume-title":"WWW","author":"He Xiangnan","year":"2017","unstructured":"Xiangnan He , Lizi Liao , Hanwang Zhang , Liqiang Nie , Xia Hu , and Tat-Seng Chua . Neural collaborative filtering . In WWW , pages 173 -- 182 , 2017 . Xiangnan He, Lizi Liao, Hanwang Zhang, Liqiang Nie, Xia Hu, and Tat-Seng Chua. Neural collaborative filtering. In WWW, pages 173--182, 2017."},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3109859.3109900"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3209978.3210023"},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330673"},{"key":"e_1_3_2_2_25_1","first-page":"111","volume-title":"Lexing Xie. Autorec: Autoencoders meet collaborative filtering. In WWW (Companion Volume)","author":"Sedhain Suvash","year":"2015","unstructured":"Suvash Sedhain , Aditya Krishna Menon , Scott Sanner , and Lexing Xie. Autorec: Autoencoders meet collaborative filtering. In WWW (Companion Volume) , pages 111 -- 112 , 2015 . Suvash Sedhain, Aditya Krishna Menon, Scott Sanner, and Lexing Xie. Autorec: Autoencoders meet collaborative filtering. In WWW (Companion Volume), pages 111--112, 2015."},{"key":"e_1_3_2_2_26_1","article-title":"Multi-task learning for recommendation over heterogeneous information network","author":"Li Hui","year":"2020","unstructured":"Hui Li , Yanlin Wang , Ziyu Lyu , and Jieming Shi . Multi-task learning for recommendation over heterogeneous information network . IEEE Trans. Knowl. Data Eng. , 2020 . Hui Li, Yanlin Wang, Ziyu Lyu, and Jieming Shi. Multi-task learning for recommendation over heterogeneous information network. IEEE Trans. Knowl. Data Eng., 2020.","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"e_1_3_2_2_27_1","volume-title":"Towards a robust deep neural network in texts: A survey. arXiv Preprint","author":"Wang Wenqi","year":"2019","unstructured":"Wenqi Wang , Lina Wang , Run Wang , Zhibo Wang , and Aoshuang Ye . Towards a robust deep neural network in texts: A survey. arXiv Preprint , 2019 a. URL https:\/\/arxiv.org\/abs\/1902.07285. Wenqi Wang, Lina Wang, Run Wang, Zhibo Wang, and Aoshuang Ye. Towards a robust deep neural network in texts: A survey. arXiv Preprint, 2019 a. URL https:\/\/arxiv.org\/abs\/1902.07285."},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3374217"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014066"},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-41822-8_1"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.5555\/3298483.3298649"},{"key":"e_1_3_2_2_35_1","first-page":"469","volume-title":"NIPS","author":"Liu Ming-Yu","year":"2016","unstructured":"Ming-Yu Liu and Oncel Tuzel . Coupled generative adversarial networks . In NIPS , pages 469 -- 477 , 2016 . Ming-Yu Liu and Oncel Tuzel. Coupled generative adversarial networks. In NIPS, pages 469--477, 2016."},{"key":"e_1_3_2_2_36_1","article-title":"Discriminative adversarial networks for cross-domain recommender systems","volume":"2019","author":"Wang Cheng","unstructured":"Cheng Wang , Mathias Niepert , and Hui Li. Recsys-dan : Discriminative adversarial networks for cross-domain recommender systems . IEEE Trans. Neural Netw. Learning Syst. , 2019 b. Cheng Wang, Mathias Niepert, and Hui Li. Recsys-dan: Discriminative adversarial networks for cross-domain recommender systems. IEEE Trans. Neural Netw. Learning Syst., 2019 b.","journal-title":"IEEE Trans. Neural Netw. Learning Syst."},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3301282"},{"key":"e_1_3_2_2_38_1","volume-title":"ICLR","author":"Radford Alec","year":"2016","unstructured":"Alec Radford , Luke Metz , and Soumith Chintala . Unsupervised representation learning with deep convolutional generative adversarial networks . In ICLR , 2016 . Alec Radford, Luke Metz, and Soumith Chintala. Unsupervised representation learning with deep convolutional generative adversarial networks. In ICLR, 2016."},{"key":"e_1_3_2_2_39_1","volume-title":"arXiv Preprint","author":"Arjovsky Martin","year":"2017","unstructured":"Martin Arjovsky , Soumith Chintala , and L\u00e9 on Bottou . Wasserstein GAN. arXiv Preprint , 2017 . URL https:\/\/arxiv.org\/abs\/1701.07875. Martin Arjovsky, Soumith Chintala, and L\u00e9 on Bottou. Wasserstein GAN. arXiv Preprint, 2017. URL https:\/\/arxiv.org\/abs\/1701.07875."},{"key":"e_1_3_2_2_40_1","volume-title":"ICLR","author":"Zhao Zhengli","year":"2018","unstructured":"Zhengli Zhao , Dheeru Dua , and Sameer Singh . Generating natural adversarial examples . In ICLR , 2018 . Zhengli Zhao, Dheeru Dua, and Sameer Singh. Generating natural adversarial examples. In ICLR, 2018."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"key":"e_1_3_2_2_42_1","first-page":"334","volume-title":"AAAI","author":"O'Mahony Michael P.","year":"2005","unstructured":"Michael P. O'Mahony , Neil J. Hurley , and Guenole C. M. Silvestre . Recommender systems: Attack types and strategies . In AAAI , pages 334 -- 339 , 2005 . Michael P. O'Mahony, Neil J. Hurley, and Guenole C. M. Silvestre. Recommender systems: Attack types and strategies. In AAAI, pages 334--339, 2005."},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/1031114.1031116"},{"key":"e_1_3_2_2_44_1","volume-title":"ITWP@IJCAI","author":"Burke LimitedRobin","year":"2005","unstructured":"Burke, Mobasher, and Bhaumik]Burke2005 LimitedRobin Burke , Bamshad Mobasher , and Runa Bhaumik . Limited knowledge shilling attacks in collaborative filtering systems . In ITWP@IJCAI , 2005 b. Burke, Mobasher, and Bhaumik]Burke2005LimitedRobin Burke, Bamshad Mobasher, and Runa Bhaumik. Limited knowledge shilling attacks in collaborative filtering systems. In ITWP@IJCAI, 2005 b."},{"key":"e_1_3_2_2_45_1","first-page":"427","volume-title":"RecSys","author":"David","year":"2013","unstructured":"David C. Wilson and Carlos E. Seminario. When power users attack: assessing impacts in collaborative recommender systems . In RecSys , pages 427 -- 430 , 2013 . David C. Wilson and Carlos E. Seminario. When power users attack: assessing impacts in collaborative recommender systems. In RecSys, pages 427--430, 2013."},{"key":"e_1_3_2_2_46_1","first-page":"57","volume-title":"RecSys","author":"Carlos","year":"2014","unstructured":"Carlos E. Seminario and David C. Wilson. Attacking item-based recommender systems with power items . In RecSys , pages 57 -- 64 , 2014 . Carlos E. Seminario and David C. Wilson. Attacking item-based recommender systems with power items. In RecSys, pages 57--64, 2014."},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274706"},{"key":"e_1_3_2_2_48_1","volume-title":"ICLR","author":"Diederik","year":"2015","unstructured":"Diederik P. Kingma and Jimmy Ba. Adam: A method for stochastic optimization . In ICLR , 2015 . Diederik P. Kingma and Jimmy Ba. Adam: A method for stochastic optimization. In ICLR, 2015."},{"key":"e_1_3_2_2_49_1","first-page":"556","volume-title":"NIPS","author":"Lee Daniel D.","year":"2000","unstructured":"Daniel D. Lee and H. Sebastian Seung . Algorithms for non-negative matrix factorization . In NIPS , pages 556 -- 562 , 2000 . Daniel D. Lee and H. Sebastian Seung. Algorithms for non-negative matrix factorization. In NIPS, pages 556--562, 2000."},{"key":"e_1_3_2_2_50_1","volume-title":"Neural network matrix factorization","author":"Dziugaite Gintare Karolina","year":"2015","unstructured":"Gintare Karolina Dziugaite and Daniel M. Roy . Neural network matrix factorization , 2015 . URL https:\/\/arxiv.org\/abs\/1511.06443. Gintare Karolina Dziugaite and Daniel M. Roy. Neural network matrix factorization, 2015. URL https:\/\/arxiv.org\/abs\/1511.06443."},{"key":"e_1_3_2_2_51_1","first-page":"5767","volume-title":"NIPS","author":"Gulrajani Ishaan","year":"2017","unstructured":"Ishaan Gulrajani , Faruk Ahmed , Martin Arjovsky , Vincent Dumoulin , and Aaron C. Courville . Improved training of wasserstein gans . In NIPS , pages 5767 -- 5777 , 2017 . Ishaan Gulrajani, Faruk Ahmed, Martin Arjovsky, Vincent Dumoulin, and Aaron C. Courville. Improved training of wasserstein gans. In NIPS, pages 5767--5777, 2017."},{"key":"e_1_3_2_2_52_1","first-page":"2408","volume-title":"IJCAI","author":"Zhang Yongfeng","year":"2015","unstructured":"Yongfeng Zhang , Yunzhi Tan , Min Zhang , Yiqun Liu , Tat-Seng Chua , and Shaoping Ma . Catch the black sheep: Unified framework for shilling attack detection based on fraudulent action propagation . In IJCAI , pages 2408 -- 2414 , 2015 . Yongfeng Zhang, Yunzhi Tan, Min Zhang, Yiqun Liu, Tat-Seng Chua, and Shaoping Ma. Catch the black sheep: Unified framework for shilling attack detection based on fraudulent action propagation. In IJCAI, pages 2408--2414, 2015."}],"event":{"name":"CIKM '20: The 29th ACM International Conference on Information and Knowledge Management","location":"Virtual Event Ireland","acronym":"CIKM '20","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web","SIGIR ACM Special Interest Group on Information Retrieval"]},"container-title":["Proceedings of the 29th ACM International Conference on Information & Knowledge Management"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3340531.3411884","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3340531.3411884","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:25:50Z","timestamp":1750206350000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3340531.3411884"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,19]]},"references-count":52,"alternative-id":["10.1145\/3340531.3411884","10.1145\/3340531"],"URL":"https:\/\/doi.org\/10.1145\/3340531.3411884","relation":{},"subject":[],"published":{"date-parts":[[2020,10,19]]},"assertion":[{"value":"2020-10-19","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}