ReOP

Recent research has demonstrated that recommendation systems exhibit vulnerability under data poisoning attacks. The primary process of data poisoning attacks involves generating malicious data (i.e., fake users) through surrogate models and injecting the malicious data into the target models’ datasets, thereby manipulating the output results of the target models. However, current methods generating fake users based on gradient descent may cause them to fall into undesired local minimum in the loss landscape and overfitting to the surrogate model, thus limiting the performance of attacking other recommendation models. To address this problem, we propose the reverse optimization algorithm (ReOP), which utilizes the reverse direction of optimization to update fake users, enabling them to steer clear of sharp local minimum in loss landscape and navigate towards the flat local minimum. ReOP makes fake users less sensitive to model changes, alleviates their overfitting to the surrogate model, and thus significantly improves the transferability of fake users. Experimental results demonstrate that ReOP surpasses the state-of-the-art baseline methods, effectively generating fake users with significant attack effects on various target models

Computer security · Computer Science · Mobile Crowdsensing and Crowdsourcing · Spam and Phishing Detection · Topic Modeling

• Neural Collaborative Filtering

  Open Access•Xiangnan He, Lizi Liao et al.•Proceedings of the 26th…•2017

  Add to list

• Friendship and mobility

  Open Access•Eunjoon Cho, Seth A Myers et al.•Proceedings of the 17th ACM…•2011

  Add to list

• Matrix Factorization Techniques for Recommender Systems

  Open Access•Yehuda Koren, Robert Bell et al.•Computer•2009

  Add to list