{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,24]],"date-time":"2026-04-24T14:47:55Z","timestamp":1777042075276,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":61,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,4,30]],"date-time":"2023-04-30T00:00:00Z","timestamp":1682812800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,4,30]]},"DOI":"10.1145\/3543507.3583289","type":"proceedings-article","created":{"date-parts":[[2023,4,26]],"date-time":"2023-04-26T23:30:51Z","timestamp":1682551851000},"page":"938-948","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Anti-FakeU: Defending Shilling Attacks on Graph Neural Network based Recommender Model"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1980-9868","authenticated-orcid":false,"given":"Xiaoyu","family":"You","sequence":"first","affiliation":[{"name":"Fudan University, School of Computer Science, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6254-0262","authenticated-orcid":false,"given":"Chi","family":"Li","sequence":"additional","affiliation":[{"name":"Fudan University, School of Computer Science, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4722-5229","authenticated-orcid":false,"given":"Daizong","family":"Ding","sequence":"additional","affiliation":[{"name":"Fudan University, School of Computer Science, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3567-3478","authenticated-orcid":false,"given":"Mi","family":"Zhang","sequence":"additional","affiliation":[{"name":"Fudan University, School of Computer Science, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5828-9842","authenticated-orcid":false,"given":"Fuli","family":"Feng","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, CCCD Key Lab of Ministry of Culture and Tourism, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1394-0395","authenticated-orcid":false,"given":"Xudong","family":"Pan","sequence":"additional","affiliation":[{"name":"Fudan University, School of Computer Science, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9714-5545","authenticated-orcid":false,"given":"Min","family":"Yang","sequence":"additional","affiliation":[{"name":"Fudan University, School of Computer Science, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,4,30]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Graph convolutional matrix completion. arXiv preprint arXiv:1706.02263","author":"van\u00a0den Berg Rianne","year":"2017","unstructured":"Rianne van\u00a0den Berg, Thomas\u00a0N Kipf, and Max Welling. 2017. Graph convolutional matrix completion. arXiv preprint arXiv:1706.02263 (2017)."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"crossref","unstructured":"Lucas Bourtoule Varun Chandrasekaran Christopher\u00a0A. Choquette-Choo Hengrui Jia Adelin Travers Baiwu Zhang David Lie and Nicolas Papernot. 2021. Machine Unlearning. In S&P.","DOI":"10.1109\/SP40001.2021.00019"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","unstructured":"Lei Chen Le Wu Richang Hong Kun Zhang and Meng Wang. 2020. Revisiting graph based collaborative filtering: A linear residual graph convolutional network approach. In AAAI Vol.\u00a034. 27\u201334.","DOI":"10.1609\/aaai.v34i01.5330"},{"key":"e_1_3_2_1_4_1","unstructured":"Ming Chen Zhewei Wei Zengfeng Huang Bolin Ding and Yaliang Li. 2020. Simple and Deep Graph Convolutional Networks. In ICML(PMLR Vol.\u00a0119). PMLR 1725\u20131735."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"Weiyu Cheng Yanyan Shen Linpeng Huang and Yanmin Zhu. 2019. Incorporating interpretability into latent factor models via fast influence analysis. In KDD.","DOI":"10.1145\/3292500.3330857"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"Konstantina Christakopoulou and Arindam Banerjee. 2019. Adversarial attacks on an oblivious recommender. In Recsys. 322\u2013330.","DOI":"10.1145\/3298689.3347031"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Wenqi Fan Tyler Derr Xiangyu Zhao Yao Ma Hui Liu Jianping Wang Jiliang Tang and Qing Li. 2021. Attacking Black-box Recommendations via Copying Cross-domain User Profiles. In ICDE.","DOI":"10.1109\/ICDE51399.2021.00140"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"crossref","unstructured":"Minghong Fang Neil\u00a0Zhenqiang Gong and Jia Liu. 2020. Influence function based data poisoning attacks to top-n recommender systems. In WWW.","DOI":"10.1145\/3366423.3380072"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"crossref","unstructured":"Shangbin Feng Herun Wan Ningnan Wang and Minnan Luo. 2021. BotRGCN: Twitter bot detection with relational graph convolutional networks. In ASONAM.","DOI":"10.1145\/3487351.3488336"},{"key":"e_1_3_2_1_10_1","first-page":"13272","article-title":"Reliable graph neural networks via robust aggregation","volume":"33","author":"Geisler Simon","year":"2020","unstructured":"Simon Geisler, Daniel Z\u00fcgner, and Stephan G\u00fcnnemann. 2020. Reliable graph neural networks via robust aggregation. NeuraIPS 33 (2020), 13272\u201313284.","journal-title":"NeuraIPS"},{"key":"e_1_3_2_1_11_1","unstructured":"Ian\u00a0J. Goodfellow Jonathon Shlens and Christian Szegedy. 2015. Explaining and Harnessing Adversarial Examples. In ICLR."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"Liyi Guo Junqi Jin Haoqi Zhang Zhenzhe Zheng Zhiye Yang Zhizhuang Xing Fei Pan Lvyin Niu Fan Wu Haiyang Xu 2021. We Know What You Want: An Advertising Strategy Recommender System for Online Advertising. In SIGKDD.","DOI":"10.1145\/3447548.3467175"},{"key":"e_1_3_2_1_13_1","unstructured":"Xiangnan He Kuan Deng Xiang Wang Yan Li Yong-Dong Zhang and Meng Wang. 2020. LightGCN: Simplifying and Powering Graph Convolution Network for Recommendation. In SIGIR Virtual Event China July 25-30. ACM."},{"key":"e_1_3_2_1_14_1","unstructured":"Xiangnan He Zhankui He Xiaoyu Du and Tat-Seng Chua. 2018. Adversarial personalized ranking for recommendation. In SIGIR. 355\u2013364."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","unstructured":"Xiangnan He Lizi Liao Hanwang Zhang Liqiang Nie Xia Hu and Tat-Seng Chua. 2017. Neural collaborative filtering. In WWW. 173\u2013182.","DOI":"10.1145\/3038912.3052569"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-021-02272-y"},{"key":"e_1_3_2_1_17_1","unstructured":"Yifan Hu Yehuda Koren and Chris Volinsky. 2008. Collaborative filtering for implicit feedback datasets. In ICDM. Ieee 263\u2013272."},{"key":"e_1_3_2_1_18_1","volume-title":"Data poisoning attacks to deep learning based recommender systems. NDSS","author":"Huang Hai","year":"2021","unstructured":"Hai Huang, Jiaming Mu, Neil\u00a0Zhenqiang Gong, Qi Li, Bin Liu, and Mingwei Xu. 2021. Data poisoning attacks to deep learning based recommender systems. NDSS (2021)."},{"key":"e_1_3_2_1_19_1","volume-title":"Class-imbalanced semi-supervised learning. arXiv preprint arXiv:2002.06815","author":"Hyun Minsung","year":"2020","unstructured":"Minsung Hyun, Jisoo Jeong, and Nojun Kwak. 2020. Class-imbalanced semi-supervised learning. arXiv preprint arXiv:2002.06815 (2020)."},{"key":"e_1_3_2_1_20_1","volume-title":"Semi-Supervised Learning With Graph Learning-Convolutional Networks","author":"Jiang Bo","unstructured":"Bo Jiang, Ziyan Zhang, Doudou Lin, Jin Tang, and Bin Luo. 2019. Semi-Supervised Learning With Graph Learning-Convolutional Networks. In CVPR. Computer Vision Foundation \/ IEEE, 11313\u201311320."},{"key":"e_1_3_2_1_21_1","volume-title":"ICICT, Vol.\u00a02","author":"Kaur Parneet","unstructured":"Parneet Kaur and Shivani Goel. 2016. Shilling attack models in recommender system. In ICICT, Vol.\u00a02. IEEE, 1\u20135."},{"key":"e_1_3_2_1_22_1","volume-title":"Kipf and Max Welling","author":"N.","year":"2017","unstructured":"Thomas\u00a0N. Kipf and Max Welling. 2017. Semi-Supervised Classification with Graph Convolutional Networks. In ICLR. OpenReview.net."},{"key":"e_1_3_2_1_23_1","volume-title":"ICML. PMLR","author":"Koh Pang\u00a0Wei","year":"2017","unstructured":"Pang\u00a0Wei Koh and Percy Liang. 2017. Understanding black-box predictions via influence functions. In ICML. PMLR, 1885\u20131894."},{"key":"e_1_3_2_1_24_1","unstructured":"Shyong\u00a0K Lam and John Riedl. 2004. Shilling recommender systems for fun and profit. In WWW. 393\u2013402."},{"key":"e_1_3_2_1_25_1","volume-title":"Data poisoning attacks on factorization-based collaborative filtering. NIPS 29","author":"Li Bo","year":"2016","unstructured":"Bo Li, Yining Wang, Aarti Singh, and Yevgeniy Vorobeychik. 2016. Data poisoning attacks on factorization-based collaborative filtering. NIPS 29 (2016)."},{"key":"e_1_3_2_1_26_1","volume-title":"Shilling attack detection in recommender systems via selecting patterns analysis. IEICE","author":"Li Wentao","year":"2016","unstructured":"Wentao Li, Min Gao, Hua Li, Jun Zeng, Qingyu Xiong, and Sachio Hirokawa. 2016. Shilling attack detection in recommender systems via selecting patterns analysis. IEICE (2016)."},{"key":"e_1_3_2_1_27_1","volume-title":"Social recommendation model based on user interaction in complex social networks. PloS one","author":"Li Yakun","year":"2019","unstructured":"Yakun Li, Jiaomin Liu, and Jiadong Ren. 2019. Social recommendation model based on user interaction in complex social networks. PloS one (2019)."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"crossref","unstructured":"Dawen Liang Rahul\u00a0G Krishnan Matthew\u00a0D Hoffman and Tony Jebara. 2018. Variational autoencoders for collaborative filtering. In WWW. 689\u2013698.","DOI":"10.1145\/3178876.3186150"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"crossref","unstructured":"Chen Lin Si Chen Hui Li Yanghua Xiao Lianyun Li and Qian Yang. 2020. Attacking recommender systems with augmented user profiles. In CIKM.","DOI":"10.1145\/3340531.3411884"},{"key":"e_1_3_2_1_30_1","unstructured":"Tsung-Yi Lin Priya Goyal Ross Girshick Kaiming He and Piotr Doll\u00e1r. 2017. Focal loss for dense object detection. In ICCV. 2980\u20132988."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"Meng Liu Hongyang Gao and Shuiwang Ji. 2020. Towards deeper graph neural networks. In KDD. 338\u2013348.","DOI":"10.1145\/3394486.3403076"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11257-008-9050-4"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2858821"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.gltp.2021.08.012"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"crossref","unstructured":"Andreas Pfadler Huan Zhao Jizhe Wang Lifeng Wang Pipei Huang and Dik\u00a0Lun Lee. 2020. Billion-scale Recommendation with Heterogeneous Side Information at Taobao. In ICDE.","DOI":"10.1109\/ICDE48307.2020.00148"},{"key":"e_1_3_2_1_36_1","unstructured":"Zimeng Qiu Eunah Cho Xiaochun Ma and William\u00a0M. Campbell. 2019. Graph-Based Semi-Supervised Learning for Natural Language Understanding. In EMNLP."},{"key":"e_1_3_2_1_37_1","volume-title":"BPR: Bayesian Personalized Ranking from Implicit Feedback. In UAI, Jeff\u00a0A. Bilmes and Andrew\u00a0Y. Ng (Eds.)","author":"Rendle Steffen","year":"2009","unstructured":"Steffen Rendle, Christoph Freudenthaler, Zeno Gantner, and Lars Schmidt-Thieme. 2009. BPR: Bayesian Personalized Ranking from Implicit Feedback. In UAI, Jeff\u00a0A. Bilmes and Andrew\u00a0Y. Ng (Eds.). AUAI Press, 452\u2013461."},{"key":"e_1_3_2_1_38_1","volume-title":"A stochastic approximation method. The annals of mathematical statistics","author":"Robbins Herbert","year":"1951","unstructured":"Herbert Robbins and Sutton Monro. 1951. A stochastic approximation method. The annals of mathematical statistics (1951), 400\u2013407."},{"key":"e_1_3_2_1_39_1","volume-title":"Tingyang Xu, and Junzhou Huang.","author":"Rong Yu","year":"2020","unstructured":"Yu Rong, Wen bing Huang, Tingyang Xu, and Junzhou Huang. 2020. DropEdge: Towards Deep Graph Convolutional Networks on Node Classification. In ICLR."},{"key":"e_1_3_2_1_40_1","unstructured":"Sumit Sidana. 2018. Recommendation systems for online advertising. Ph.\u00a0D. Dissertation. Universit\u00e9 Grenoble Alpes."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/s41109-020-00273-3"},{"key":"e_1_3_2_1_42_1","volume-title":"Adversarial Attacks on Graph Neural Networks via Node Injections: A Hierarchical Reinforcement Learning Approach. WWW","author":"Sun Yiwei","year":"2020","unstructured":"Yiwei Sun, Suhang Wang, Xianfeng Tang, Tsung-Yu Hsieh, and Vasant\u00a0G Honavar. 2020. Adversarial Attacks on Graph Neural Networks via Node Injections: A Hierarchical Reinforcement Learning Approach. WWW (2020)."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"crossref","unstructured":"Jiaxi Tang Hongyi Wen and Ke Wang. 2020. Revisiting adversarially learned injection attacks against recommender systems. In RecSys. 318\u2013327.","DOI":"10.1145\/3383313.3412243"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"crossref","unstructured":"Xianfeng Tang Yandong Li Yiwei Sun Huaxiu Yao Prasenjit Mitra and Suhang Wang. 2020. Transferring robustness for graph neural network against poisoning attacks. In WSDM.","DOI":"10.1145\/3336191.3371851"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"crossref","unstructured":"Jie Wang Jianqing Liang Junbiao Cui and Jiye Liang. 2021. Semi-supervised learning with mixed-order graph convolutional networks. Inf. Sci. (2021).","DOI":"10.1016\/j.ins.2021.05.057"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"crossref","unstructured":"Menghan Wang Yujie Lin Guli Lin Keping Yang and Xiao-ming Wu. 2020. M2GRL: A multi-task multi-view graph representation learning framework for web-scale recommender systems. In SIGKDD.","DOI":"10.1145\/3394486.3403284"},{"key":"e_1_3_2_1_47_1","volume-title":"Attack Graph Convolutional Networks by Adding Fake Nodes. ArXiv","author":"Wang Xiaoyun","year":"2018","unstructured":"Xiaoyun Wang, Joe Eaton, Cho-Jui Hsieh, and Shyhtsun\u00a0Felix Wu. 2018. Attack Graph Convolutional Networks by Adding Fake Nodes. ArXiv (2018)."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"crossref","unstructured":"Xiang Wang Xiangnan He Meng Wang Fuli Feng and Tat-Seng Chua. 2019. Neural graph collaborative filtering. In SIGIR. 165\u2013174.","DOI":"10.1145\/3331184.3331267"},{"key":"e_1_3_2_1_49_1","volume-title":"Robustness to Adversarial Attack. ICLR","author":"Willetts Matthew","year":"2021","unstructured":"Matthew Willetts, Alexander Camuto, Tom Rainforth, Stephen Roberts, and Chris Holmes. 2021. Improving VAEs\u2019 Robustness to Adversarial Attack. ICLR (2021)."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"crossref","unstructured":"David\u00a0C Wilson and Carlos\u00a0E Seminario. 2013. When power users attack: assessing impacts in collaborative recommender systems. In RecSys. 427\u2013430.","DOI":"10.1145\/2507157.2507220"},{"key":"e_1_3_2_1_51_1","unstructured":"Jiancan Wu Xiang Wang Fuli Feng Xiangnan He Liang Chen Jianxun Lian and Xing Xie. 2021. Self-supervised graph learning for recommendation. In SIGIR."},{"key":"e_1_3_2_1_52_1","volume-title":"Raymond Chi\u00a0Wing Wong, and Jiawei Han","author":"Xie Yiqing","year":"2020","unstructured":"Yiqing Xie, Sha Li, Carl Yang, Raymond Chi\u00a0Wing Wong, and Jiawei Han. 2020. When do gnns work: Understanding and improving neighborhood aggregation. In IJCAI."},{"key":"e_1_3_2_1_53_1","unstructured":"Keyulu Xu Chengtao Li Yonglong Tian Tomohiro Sonobe Ken-ichi Kawarabayashi and Stefanie Jegelka. 2018. Representation Learning on Graphs with Jumping Knowledge Networks. In ICML."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"crossref","unstructured":"Liang Yang Chuan Wang Junhua Gu Xiaochun Cao and Bingxin Niu. 2021. Why do attributes propagate in graph convolutional neural networks. In AAAI.","DOI":"10.1609\/aaai.v35i5.16588"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"crossref","unstructured":"Rex Ying Ruining He Kaifeng Chen Pong Eksombatchai William\u00a0L Hamilton and Jure Leskovec. 2018. Graph convolutional neural networks for web-scale recommender systems. In SIGKDD.","DOI":"10.1145\/3219819.3219890"},{"key":"e_1_3_2_1_56_1","unstructured":"Zhenrui Yue Zhankui He Huimin Zeng and Julian McAuley. 2021. Black-Box Attacks on Sequential Recommenders via Data-Free Model Extraction. In Recsys."},{"key":"e_1_3_2_1_57_1","unstructured":"Zhenrui Yue Zhankui He Huimin Zeng and Julian\u00a0J. McAuley. 2021. Black-Box Attacks on Sequential Recommenders via Data-Free Model Extraction. In RecSys."},{"key":"e_1_3_2_1_58_1","volume-title":"Data Poisoning Attack against Recommender System Using Incomplete and Perturbed Data","author":"Zhang Hengtong","unstructured":"Hengtong Zhang, Changxin Tian, Yaliang Li, Lu Su, Nan Yang, Wayne\u00a0Xin Zhao, and Jing Gao. 2021. Data Poisoning Attack against Recommender System Using Incomplete and Perturbed Data. In SIGKDD, Feida Zhu, Beng\u00a0Chin Ooi, and Chunyan Miao (Eds.). ACM, 2154\u20132164."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3285029"},{"key":"e_1_3_2_1_60_1","volume-title":"Zi Huang, and Lizhen Cui.","author":"Zhang Shijie","year":"2020","unstructured":"Shijie Zhang, Hongzhi Yin, Tong Chen, Quoc Viet\u00a0Nguyen Hung, Zi Huang, and Lizhen Cui. 2020. Gcn-based user representation learning for unifying robust recommendation and fraudster detection. In SIGIR. 689\u2013698."},{"key":"e_1_3_2_1_61_1","unstructured":"Yongfeng Zhang Yunzhi Tan Min Zhang Yiqun Liu Tat-Seng Chua and Shaoping Ma. 2015. Catch the black sheep: unified framework for shilling attack detection based on fraudulent action propagation. In IJCAI."}],"event":{"name":"WWW '23: The ACM Web Conference 2023","location":"Austin TX USA","acronym":"WWW '23","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM Web Conference 2023"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3543507.3583289","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3543507.3583289","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:37:22Z","timestamp":1750178242000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3543507.3583289"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,4,30]]},"references-count":61,"alternative-id":["10.1145\/3543507.3583289","10.1145\/3543507"],"URL":"https:\/\/doi.org\/10.1145\/3543507.3583289","relation":{},"subject":[],"published":{"date-parts":[[2023,4,30]]},"assertion":[{"value":"2023-04-30","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}