{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T17:31:08Z","timestamp":1783791068786,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":57,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,5,13]],"date-time":"2024-05-13T00:00:00Z","timestamp":1715558400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"the CCCD Key Lab of Ministry of Culture and Tourism"},{"name":"the National Key Research and Development Program of China","award":["2022YFB3104701"],"award-info":[{"award-number":["2022YFB3104701"]}]},{"name":"the National Natural Science Foundation of China","award":["62272437"],"award-info":[{"award-number":["62272437"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,5,13]]},"DOI":"10.1145\/3589334.3645403","type":"proceedings-article","created":{"date-parts":[[2024,5,8]],"date-time":"2024-05-08T07:08:13Z","timestamp":1715152093000},"page":"3343-3354","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Uplift Modeling for Target User Attacks on Recommender Systems"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5199-1428","authenticated-orcid":false,"given":"Wenjie","family":"Wang","sequence":"first","affiliation":[{"name":"National University of Singapore, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-0957-638X","authenticated-orcid":false,"given":"Changsheng","family":"Wang","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5828-9842","authenticated-orcid":false,"given":"Fuli","family":"Feng","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2616-6880","authenticated-orcid":false,"given":"Wentao","family":"Shi","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4722-5229","authenticated-orcid":false,"given":"Daizong","family":"Ding","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6097-7807","authenticated-orcid":false,"given":"Tat-Seng","family":"Chua","sequence":"additional","affiliation":[{"name":"National University of Singapore, Singapore, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,5,13]]},"reference":[{"key":"e_1_3_2_2_1_1","first-page":"2310","volume-title":"WWW","author":"Ai Meng","year":"2022","unstructured":"Meng Ai, Biao Li, Heyang Gong, Qingwei Yu, Shengjie Xue, Yuan Zhang, Yunzhou Zhang, and Peng Jiang. Lbcf: A large-scale budget-constrained causal forest algorithm. In WWW, pages 2310--2319. ACM, 2022."},{"key":"e_1_3_2_2_2_1","first-page":"214","volume-title":"ICML","author":"Arjovsky Martin","year":"2017","unstructured":"Martin Arjovsky, Soumith Chintala, and L\u00e9on Bottou. Wasserstein generative adversarial networks. In Doina Precup and Yee Whye Teh, editors, ICML, pages 214--223. PMLR, 2017."},{"key":"e_1_3_2_2_3_1","volume-title":"Yelp dataset challenge: Review rating prediction. arXiv preprint arXiv:1605.05362","author":"Asghar Nabiha","year":"2016","unstructured":"Nabiha Asghar. Yelp dataset challenge: Review rating prediction. arXiv preprint arXiv:1605.05362, 2016."},{"key":"e_1_3_2_2_4_1","volume-title":"A bi-step grounding paradigm for large language models in recommendation systems. arXiv:2308.08434","author":"Bao Keqin","year":"2023","unstructured":"Keqin Bao, Jizhi Zhang, Wenjie Wang, Yang Zhang, Zhengyi Yang, Yancheng Luo, Fuli Feng, Xiangnaan He, and Qi Tian. A bi-step grounding paradigm for large language models in recommendation systems. arXiv:2308.08434, 2023."},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3604915.3608857"},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2005.127"},{"key":"e_1_3_2_2_7_1","first-page":"17","volume-title":"IJCAI","author":"Burke Robin","year":"2005","unstructured":"Robin Burke, Bamshad Mobasher, and Runa Bhaumik. Limited knowledge shilling attacks in collaborative filtering systems. In IJCAI, pages 17--24. ACM, 2005."},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3397271.3401196"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3439729"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.findings-emnlp.143"},{"key":"e_1_3_2_2_11_1","first-page":"1583","volume-title":"ICDE","author":"Fan Wenqi","year":"2021","unstructured":"Wenqi Fan, Tyler Derr, Xiangyu Zhao, Yao Ma, Hui Liu, Jianping Wang, Jiliang Tang, and Qing Li. Attacking black-box recommendations via copying crossdomain user profiles. In ICDE, pages 1583--1594. IEEE, 2021."},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274706"},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380072"},{"key":"e_1_3_2_2_14_1","first-page":"1","volume-title":"PMLR","author":"Gutierrez Pierre","year":"2017","unstructured":"Pierre Gutierrez and Jean-Yves G\u00e9rardy. Causal inference and uplift modelling: A review of the literature. In PMLR, pages 1--13, 2017."},{"key":"e_1_3_2_2_15_1","volume-title":"The movielens datasets: History and context. ACM, 5(4)","author":"Maxwell Harper F.","year":"2015","unstructured":"F. Maxwell Harper and Joseph A. Konstan. The movielens datasets: History and context. ACM, 5(4), 2015."},{"key":"e_1_3_2_2_16_1","first-page":"173","volume-title":"WWW","author":"He Xiangnan","year":"2017","unstructured":"Xiangnan He, Lizi Liao, Hanwang Zhang, Liqiang Nie, Xia Hu, and Tat-Seng Chua. Neural collaborative filtering. In WWW, pages 173--182. ACM, 2017."},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3397271.3401063"},{"key":"e_1_3_2_2_18_1","volume-title":"Qi Li, Bin Liu, and Mingwei Xu. Data poisoning attacks to deep learning based recommender systems. arXiv:2101.02644","author":"Huang Hai","year":"2021","unstructured":"Hai Huang, Jiaming Mu, Neil Zhenqiang Gong, Qi Li, Bin Liu, and Mingwei Xu. Data poisoning attacks to deep learning based recommender systems. arXiv:2101.02644, 2021."},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/INVENTIVE.2016.7824865"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2009.263"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/988672.988726"},{"key":"e_1_3_2_2_22_1","volume-title":"NeurIPS","author":"Li Bo","year":"2016","unstructured":"Bo Li, Yining Wang, Aarti Singh, and Yevgeniy Vorobeychik. Data poisoning attacks on factorization-based collaborative filtering. NeurIPS, 2016."},{"key":"e_1_3_2_2_23_1","volume-title":"NeurIPS","author":"Li Haoyang","year":"2022","unstructured":"Haoyang Li, Shimin Di, and Lei Chen. Revisiting injective attacks on recommender systems. In NeurIPS, 2022."},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE53745.2022.00081"},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3411884"},{"key":"e_1_3_2_2_26_1","first-page":"1","volume-title":"TNNLS","author":"Lin Chen","year":"2022","unstructured":"Chen Lin, Si Chen, Meifang Zeng, Sheng Zhang, Min Gao, and Hui Li. Shilling black-box recommender systems by learning to generate fake user profiles. TNNLS, pages 1--15, 2022."},{"issue":"1","key":"e_1_3_2_2_27_1","first-page":"76","article-title":"Amazon.com recommendations: item-to-item collaborative filtering","volume":"7","author":"Linden G.","year":"2003","unstructured":"G. Linden, B. Smith, and J. York. Amazon.com recommendations: item-to-item collaborative filtering. IC, 7(1):76--80, 2003.","journal-title":"IC"},{"key":"e_1_3_2_2_28_1","volume-title":"NeurIPS","author":"Liu Zihan","year":"2022","unstructured":"Zihan Liu, Yun Luo, Lirong Wu, Zicheng Liu, and Stan Z. Li. Towards reasonable budget allocation in untargeted graph structure attacks via gradient debias. In NeurIPS, 2022."},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11257-008-9050-4"},{"key":"e_1_3_2_2_30_1","volume-title":"Toward trustworthy recommender systems: An analysis of attack models and algorithm robustness. TOIT, 7(4):23--es","author":"Mobasher Bamshad","year":"2007","unstructured":"Bamshad Mobasher, Robin Burke, Runa Bhaumik, and Chad Williams. Toward trustworthy recommender systems: An analysis of attack models and algorithm robustness. TOIT, 7(4):23--es, 2007."},{"key":"e_1_3_2_2_31_1","volume-title":"Thanh Tam Nguyen, Thanh Trung Huynh, Viet Hung Vu, Phi Le Nguyen, Jun Jo, and Quoc Viet Hung Nguyen. Poisoning gnn-based recommender systems with generative surrogatebased attacks. ACM, 41(3), feb","author":"Thanh Toan Nguyen","year":"2023","unstructured":"Toan Nguyen Thanh, Nguyen Duc Khang Quach, Thanh Tam Nguyen, Thanh Trung Huynh, Viet Hung Vu, Phi Le Nguyen, Jun Jo, and Quoc Viet Hung Nguyen. Poisoning gnn-based recommender systems with generative surrogatebased attacks. ACM, 41(3), feb 2023."},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1360\/N112017-00112"},{"key":"e_1_3_2_2_33_1","volume-title":"accurate, diverse, and scalable recommendations for interactive applications. ACM, 7(1), dec","author":"Paudel Bibek","year":"2016","unstructured":"Bibek Paudel, Fabian Christoffel, Chris Newell, and Abraham Bernstein. Updatable, accurate, diverse, and scalable recommendations for interactive applications. ACM, 7(1), dec 2016."},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3018661.3018696"},{"issue":"5","key":"e_1_3_2_2_35_1","first-page":"1989","article-title":"A survey of recommendation system: Research challenges","volume":"4","author":"Sharma Lalita","year":"2013","unstructured":"Lalita Sharma and Anju Gera. A survey of recommendation system: Research challenges. IJETT, 4(5):1989--1992, 2013.","journal-title":"IJETT"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE48307.2020.00021"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3383313.3412243"},{"key":"e_1_3_2_2_38_1","first-page":"1574","volume-title":"WWW","author":"Tu Ye","year":"2021","unstructured":"Ye Tu, Kinjal Basu, Cyrus DiCiccio, Romil Bansal, Preetam Nandy, Padmini Jaikumar, and Shaunak Chatterjee. Personalized treatment selection using causal heterogeneity. In WWW, pages 1574--1585. ACM, 2021."},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2507157.2507220"},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467335"},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3404835.3462914"},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/787"},{"key":"e_1_3_2_2_43_1","volume-title":"ACM","author":"Xie Xu","year":"2021","unstructured":"Xu Xie, Zhaoyang Liu, Shiwen Wu, Fei Sun, Cihang Liu, Jiawei Chen, Jinyang Gao, Bin Cui, and Bolin Ding. Causcf: Causal collaborative filtering for recommendation effect estimation. In CIKM, page 4253--4263. ACM, 2021."},{"key":"e_1_3_2_2_44_1","first-page":"671","volume-title":"USENIX","author":"Xing Xingyu","year":"2013","unstructured":"Xingyu Xing, Wei Meng, Dan Doozan, Alex C. Snoeren, Nick Feamster, and Wenke Lee. Take this personally: Pollution attacks on personalized services. In USENIX, pages 671--686. USENIX, 2013."},{"key":"e_1_3_2_2_45_1","first-page":"671","volume-title":"USENIX","author":"Xing Xinyu","year":"2013","unstructured":"Xinyu Xing,Wei Meng, Dan Doozan, Alex C Snoeren, Nick Feamster, andWenke Lee. Take this personally: Pollution attacks on personalized services. In USENIX, pages 671--686, 2013."},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23020"},{"key":"e_1_3_2_2_47_1","volume-title":"A survey on causal inference. ACM, may","author":"Yao Liuyi","year":"2021","unstructured":"Liuyi Yao, Zhixuan Chu, Sheng Li, Yaliang Li, Jing Gao, and Aidong Zhang. A survey on causal inference. ACM, may 2021."},{"key":"e_1_3_2_2_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE53745.2022.00167"},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539341"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1972.10481251"},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3379992"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467233"},{"issue":"3","key":"e_1_3_2_2_53_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3374217","article-title":"Adversarial attacks on deep-learning models in natural language processing: A survey","volume":"11","author":"Zhang Wei Emma","year":"2020","unstructured":"Wei Emma Zhang, Quan Z Sheng, Ahoud Alhazmi, and Chenliang Li. Adversarial attacks on deep-learning models in natural language processing: A survey. TIST, 11(3):1--41, 2020.","journal-title":"TIST"},{"key":"e_1_3_2_2_54_1","volume-title":"A unified survey of treatment effect heterogeneity modelling and uplift modelling. ACM Comput. Surv., 54(8)","author":"Zhang Weijia","year":"2021","unstructured":"Weijia Zhang, Jiuyong Li, and Lin Liu. A unified survey of treatment effect heterogeneity modelling and uplift modelling. ACM Comput. Surv., 54(8), 2021."},{"key":"e_1_3_2_2_55_1","volume-title":"Targeted data poisoning attack on news recommendation system. In arXiv:2203.03560","author":"Zhang Xudong","year":"2022","unstructured":"Xudong Zhang, Zan Wang, Jingke Zhao, and Lanjun Wang. Targeted data poisoning attack on news recommendation system. In arXiv:2203.03560, 2022."},{"key":"e_1_3_2_2_56_1","volume-title":"IJCAI. ACM","author":"Zhang Yongfeng","year":"2015","unstructured":"Yongfeng Zhang, Yunzhi Tan, Min Zhang, Yiqun Liu, Tat-Seng Chua, and Shaoping Ma. Catch the black sheep: unified framework for shilling attack detection based on fraudulent action propagation. In IJCAI. ACM, 2015."},{"key":"e_1_3_2_2_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/2492517.2492519"}],"event":{"name":"WWW '24: The ACM Web Conference 2024","location":"Singapore Singapore","acronym":"WWW '24","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM Web Conference 2024"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589334.3645403","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3589334.3645403","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T00:22:23Z","timestamp":1755822143000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589334.3645403"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,13]]},"references-count":57,"alternative-id":["10.1145\/3589334.3645403","10.1145\/3589334"],"URL":"https:\/\/doi.org\/10.1145\/3589334.3645403","relation":{},"subject":[],"published":{"date-parts":[[2024,5,13]]},"assertion":[{"value":"2024-05-13","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}