Proceedings of the 44th International ACM SIGIR Conference on Research and Development in Information Retrieval 2021
DOI: 10.1145/3404835.3462914
|View full text |Cite
|
Sign up to set email alerts
|

Fight Fire with Fire: Towards Robust Recommender Systems via Adversarial Poisoning Training

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1
1
1
1

Citation Types

0
14
0

Year Published

2021
2021
2023
2023

Publication Types

Select...
5
2
2
1

Relationship

2
8

Authors

Journals

citations
Cited by 26 publications
(16 citation statements)
references
References 37 publications
0
14
0
Order By: Relevance
“…In [16], the latent variable model is employed to reveal the user type by solving the program of maximization the entropy of ratings distribution in a star-rating system. In [26], the latent variable model relies on counteracting the adversarial poisoning attacks, which is the process of fake profiles generation that is intended to minimize the empirical risk. The algorithm described in [1] also uses the generative factor model, which utilizes the user metadata as an additional source of evidence against fake ratings.…”
Section: Related Workmentioning
confidence: 99%
“…In [16], the latent variable model is employed to reveal the user type by solving the program of maximization the entropy of ratings distribution in a star-rating system. In [26], the latent variable model relies on counteracting the adversarial poisoning attacks, which is the process of fake profiles generation that is intended to minimize the empirical risk. The algorithm described in [1] also uses the generative factor model, which utilizes the user metadata as an additional source of evidence against fake ratings.…”
Section: Related Workmentioning
confidence: 99%
“…Multiple different RS have been proposed over the last years, many of them based on matrix factorization (MF) [35,25] or collaborative filtering (see, e.g., [37]). While recent methods increasingly rely on neural network-based factorization or recommendation (see, e.g., [42]), it remains debatable whether they yield superior results, e.g., with respect to performance and efficiency [21,30]. Factorization Machines (FM) represent another line of research which is closely related to MF.…”
Section: Related Literaturementioning
confidence: 99%
“…Secondly, the AUC reduction on Electronics is smaller than that of Frappe. The possible reason is that Electronics has more data, corresponding to the finding that model robustness requires more data [50]. Finally, compared with FM, MixFM has a smaller reduction on AUC, revealing that using additional mixed data helps to improve FM's robustness.…”
Section: Robustness Evaluationmentioning
confidence: 99%