{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,25]],"date-time":"2026-09-25T17:54:37Z","timestamp":1790358877667,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":51,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,3,10]],"date-time":"2025-03-10T00:00:00Z","timestamp":1741564800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"ARC Discovery Early Career Researcher Award","award":["DE230101033"],"award-info":[{"award-number":["DE230101033"]}]},{"name":"ARC Discovery Early Career Research Award","award":["DE250100613"],"award-info":[{"award-number":["DE250100613"]}]},{"name":"the National Natural Science Foundation of China","award":["62176028"],"award-info":[{"award-number":["62176028"]}]},{"name":"Industrial Transformation Training Centre","award":["IC200100022"],"award-info":[{"award-number":["IC200100022"]}]},{"name":"ARC Future Fellowship","award":["FT210100624"],"award-info":[{"award-number":["FT210100624"]}]},{"name":"ARC Linkage Project","award":["LP230200892"],"award-info":[{"award-number":["LP230200892"]}]},{"name":"ARC Discovery Project","award":["DP240101108 and DP240101814"],"award-info":[{"award-number":["DP240101108 and DP240101814"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,3,10]]},"DOI":"10.1145\/3701551.3703484","type":"proceedings-article","created":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T12:30:16Z","timestamp":1740573016000},"page":"1020-1023","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Towards Secure and Robust Recommender Systems: A Data-Centric Perspective"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9774-4596","authenticated-orcid":false,"given":"Zongwei","family":"Wang","sequence":"first","affiliation":[{"name":"Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3401-9829","authenticated-orcid":false,"given":"Junliang","family":"Yu","sequence":"additional","affiliation":[{"name":"The University of Queesland, Brisbane, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7269-146X","authenticated-orcid":false,"given":"Tong","family":"Chen","sequence":"additional","affiliation":[{"name":"The University of Queensland, Brisbane, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1395-261X","authenticated-orcid":false,"given":"Hongzhi","family":"Yin","sequence":"additional","affiliation":[{"name":"The University of Queensland, Brisbane, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6739-4145","authenticated-orcid":false,"given":"Shazia","family":"Sadiq","sequence":"additional","affiliation":[{"name":"The University of Queensland, Brisbane, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0127-7477","authenticated-orcid":false,"given":"Min","family":"Gao","sequence":"additional","affiliation":[{"name":"Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,3,10]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2019.04.001"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"crossref","unstructured":"Wenqi Fan Tyler Derr Xiangyu Zhao Yao Ma Hui Liu Jianping Wang Jiliang Tang and Qing Li. 2021. Attacking black-box recommendations via copying cross-domain user profiles. In ICDE.","DOI":"10.1109\/ICDE51399.2021.00140"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-91452-7_20"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.is.2022.102154"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3397271.3401063"},{"key":"e_1_3_2_1_6_1","unstructured":"Xiangnan He Lizi Liao Hanwang Zhang Liqiang Nie Xia Hu and Tat-Seng Chua. 2017. Neural collaborative filtering. In WWW."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671692"},{"key":"e_1_3_2_1_8_1","volume-title":"Unsupervised Post-Time Fake Social Message Detection with Recommendation-aware Representation Learning. In Companion Proceedings of the Web Conference","author":"Hsiao Shao-Ping","year":"2022","unstructured":"Shao-Ping Hsiao, Yu-Che Tsai, and Cheng-Te Li. 2022. Unsupervised Post-Time Fake Social Message Detection with Recommendation-aware Representation Learning. In Companion Proceedings of the Web Conference 2022. 232--235."},{"key":"e_1_3_2_1_9_1","volume-title":"Denoising diffusion restoration models. Advances in Neural Information Processing Systems","author":"Kawar Bahjat","year":"2022","unstructured":"Bahjat Kawar, Michael Elad, Stefano Ermon, and Jiaming Song. 2022. Denoising diffusion restoration models. Advances in Neural Information Processing Systems (2022)."},{"key":"e_1_3_2_1_10_1","volume-title":"Matrix factorization techniques for recommender systems. Computer","author":"Koren Yehuda","year":"2009","unstructured":"Yehuda Koren, Robert Bell, and Chris Volinsky. 2009. Matrix factorization techniques for recommender systems. Computer (2009)."},{"key":"e_1_3_2_1_11_1","volume-title":"A Survey on Data-Centric Recommender Systems. arXiv preprint arXiv:2401.17878","author":"Lai Riwei","year":"2024","unstructured":"Riwei Lai, Li Chen, Rui Chen, and Chi Zhang. 2024. A Survey on Data-Centric Recommender Systems. arXiv preprint arXiv:2401.17878 (2024)."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"Chen Lin Si Chen Hui Li Yanghua Xiao Lianyun Li and Qian Yang. 2020. Attacking recommender systems with augmented user profiles. In CIKM.","DOI":"10.1145\/3340531.3411884"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3620677"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3539618.3591733"},{"key":"e_1_3_2_1_15_1","volume-title":"Stealthy attack on graph recommendation system. Expert Systems with Applications","author":"Ma Hao","year":"2024","unstructured":"Hao Ma, Min Gao, Feng Wei, Zongwei Wang, Feng Jiang, Zehua Zhao, and Zhengyi Yang. 2024. Stealthy attack on graph recommendation system. Expert Systems with Applications (2024), 124476."},{"key":"e_1_3_2_1_16_1","volume-title":"Thanh Tam Nguyen, Thanh Trung Huynh, Thanh Thi Nguyen, Matthias Weidlich, and Hongzhi Yin.","author":"Nguyen Thanh Toan","year":"2024","unstructured":"Thanh Toan Nguyen, Nguyen Quoc Viet Hung, Thanh Tam Nguyen, Thanh Trung Huynh, Thanh Thi Nguyen, Matthias Weidlich, and Hongzhi Yin. 2024. Manipulating recommender systems: A survey of poisoning attacks and countermeasures. Comput. Surveys (2024)."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583374"},{"key":"e_1_3_2_1_18_1","volume-title":"BPR: Bayesian personalized ranking from implicit feedback. arXiv preprint arXiv:1205.2618","author":"Rendle Steffen","year":"2012","unstructured":"Steffen Rendle, Christoph Freudenthaler, Zeno Gantner, and Lars Schmidt-Thieme. 2012. BPR: Bayesian personalized ranking from implicit feedback. arXiv preprint arXiv:1205.2618 (2012)."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-020-09898-3"},{"key":"e_1_3_2_1_20_1","volume-title":"Fast-adapting and privacy-preserving federated recommender system. The VLDB Journal","author":"Wang Qinyong","year":"2022","unstructured":"Qinyong Wang, Hongzhi Yin, Tong Chen, Junliang Yu, Alexander Zhou, and Xiangliang Zhang. 2022b. Fast-adapting and privacy-preserving federated recommender system. The VLDB Journal (2022)."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipm.2022.103031"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","unstructured":"Xiang Wang Xiangnan He Meng Wang Fuli Feng and Tat-Seng Chua. 2019. Neural graph collaborative filtering. In SIGIR.","DOI":"10.1145\/3331184.3331267"},{"key":"e_1_3_2_1_23_1","volume-title":"Gray-box shilling attack: an adversarial learning approach. ACM TIST","author":"Wang Zongwei","year":"2022","unstructured":"Zongwei Wang, Min Gao, Jundong Li, Junwei Zhang, and Jiang Zhong. 2022a. Gray-box shilling attack: an adversarial learning approach. ACM TIST (2022)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"crossref","unstructured":"Zongwei Wang Min Gao Wentao Li Junliang Yu Linxin Guo and Hongzhi Yin. 2023. Efficient Bi-Level Optimization for Recommendation Denoising. In SIGKDD.","DOI":"10.1145\/3580305.3599324"},{"key":"e_1_3_2_1_25_1","volume-title":"Poisoning Attacks and Defenses in Recommender Systems: A Survey. arXiv preprint arXiv:2406.01022","author":"Wang Zongwei","year":"2024","unstructured":"Zongwei Wang, Junliang Yu, Min Gao, Guanhua Ye, Shazia Sadiq, and Hongzhi Yin. 2024a. Poisoning Attacks and Defenses in Recommender Systems: A Survey. arXiv preprint arXiv:2406.01022 (2024)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671795"},{"key":"e_1_3_2_1_27_1","volume-title":"Ready for emerging threats to recommender systems? A graph convolution-based generative shilling attack. Information Sciences","author":"Wu Fan","year":"2021","unstructured":"Fan Wu, Min Gao, Junliang Yu, Zongwei Wang, Kecheng Liu, and Xu Wang. 2021. Ready for emerging threats to recommender systems? A graph convolution-based generative shilling attack. Information Sciences (2021)."},{"key":"e_1_3_2_1_28_1","volume-title":"Dataset condensation for recommendation. arXiv preprint arXiv:2310.01038","author":"Wu Jiahao","year":"2023","unstructured":"Jiahao Wu, Wenqi Fan, Shengcai Liu, Qijiong Liu, Rui He, Qing Li, and Ke Tang. 2023a. Dataset condensation for recommendation. arXiv preprint arXiv:2310.01038 (2023)."},{"key":"e_1_3_2_1_29_1","volume-title":"Leveraging Large Language Models (LLMs) to Empower Training-Free Dataset Condensation for Content-Based Recommendation. arXiv preprint arXiv:2310.09874","author":"Wu Jiahao","year":"2023","unstructured":"Jiahao Wu, Qijiong Liu, Hengchang Hu, Wenqi Fan, Shengcai Liu, Qing Li, Xiao-Ming Wu, and Ke Tang. 2023b. Leveraging Large Language Models (LLMs) to Empower Training-Free Dataset Condensation for Content-Based Recommendation. arXiv preprint arXiv:2310.09874 (2023)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2019.04.012"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2018.2840974"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-63076-8_16"},{"key":"e_1_3_2_1_33_1","volume-title":"Self-supervised learning for recommender systems: A survey. TKDE","author":"Yu Junliang","year":"2023","unstructured":"Junliang Yu, Hongzhi Yin, Xin Xia, Tong Chen, Jundong Li, and Zi Huang. 2023. Self-supervised learning for recommender systems: A survey. TKDE (2023)."},{"key":"e_1_3_2_1_34_1","volume-title":"Tieke He, Liang Chen, and Hongzhi Yin.","author":"Yuan Wei","year":"2023","unstructured":"Wei Yuan, Quoc Viet Hung Nguyen, Tieke He, Liang Chen, and Hongzhi Yin. 2023a. Manipulating Federated Recommender Systems: Poisoning with Synthetic Users and Its Countermeasures. arXiv (2023)."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583359"},{"key":"e_1_3_2_1_36_1","volume-title":"Quoc Viet Hung Nguyen, and Hongzhi Yin","author":"Yuan Wei","year":"2024","unstructured":"Wei Yuan, Chaoqun Yang, Liang Qu, Guanhua Ye, Quoc Viet Hung Nguyen, and Hongzhi Yin. 2024. Robust federated contrastive recommender system against model poisoning attack. arXiv preprint arXiv:2403.20107 (2024)."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3539597.3570463"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3630005"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3630005"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3677375"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3578361"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449813"},{"key":"e_1_3_2_1_43_1","volume-title":"Quoc Viet Hung Nguyen, and Lizhen Cui","author":"Zhang Shijie","year":"2022","unstructured":"Shijie Zhang, Hongzhi Yin, Tong Chen, Zi Huang, Quoc Viet Hung Nguyen, and Lizhen Cui. 2022. Pipattack: Poisoning federated recommender systems for manipulating item promotion. In WSDM."},{"key":"e_1_3_2_1_44_1","volume-title":"Zi Huang, and Lizhen Cui.","author":"Zhang Shijie","year":"2020","unstructured":"Shijie Zhang, Hongzhi Yin, Tong Chen, Quoc Viet Nguyen Hung, Zi Huang, and Lizhen Cui. 2020. Gcn-based user representation learning for unifying robust recommendation and fraudster detection. In SIGIR."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2023.3295601"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v31i1.10764"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3626772.3657825"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11280-021-00967-3"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467427"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3626772.3657814"},{"key":"e_1_3_2_1_51_1","volume-title":"Model Stealing Attack against Recommender System. arXiv preprint arXiv:2312.11571","author":"Zhu Zhihao","year":"2023","unstructured":"Zhihao Zhu, Rui Fan, Chenwang Wu, Yi Yang, Defu Lian, and Enhong Chen. 2023. Model Stealing Attack against Recommender System. arXiv preprint arXiv:2312.11571 (2023)."}],"event":{"name":"WSDM '25: The Eighteenth ACM International Conference on Web Search and Data Mining","location":"Hannover Germany","acronym":"WSDM '25","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data","SIGIR ACM Special Interest Group on Information Retrieval"]},"container-title":["Proceedings of the Eighteenth ACM International Conference on Web Search and Data Mining"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3701551.3703484","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3701551.3703484","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,21]],"date-time":"2025-08-21T09:07:49Z","timestamp":1755767269000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3701551.3703484"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3,10]]},"references-count":51,"alternative-id":["10.1145\/3701551.3703484","10.1145\/3701551"],"URL":"https:\/\/doi.org\/10.1145\/3701551.3703484","relation":{},"subject":[],"published":{"date-parts":[[2025,3,10]]},"assertion":[{"value":"2025-03-10","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}