arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2005.08164cs.IRcs.CRcs.LG
收藏

利用增强的用户简档攻击推荐系统

Attacking Recommender Systems with Augmented User Profiles

Xiamen University(厦门大学);Fudan University(复旦大学)

Chen Lin, Si Chen, Hui Li, Yanghua Xiao, Lianyun Li, Qian Yang

摘要:

推荐系统(RS)已经成为许多在线服务的重要组成部分。由于其在引导客户购买方面的关键作用,无良方自然有动机欺骗RS以获取利润。在本文中,我们研究了先令攻击:一个存在的和有利可图的攻击,敌对方注入了一些用户简档,以促进或降级的目标项目。传统的欺骗攻击模型都是基于简单的、易于检测的攻击策略,或者直接采用对抗攻击的方法,而没有对RS进行专门的设计。此外,在文献中缺乏对基于深度学习的RS的攻击影响的研究,使得对真实RS的shilling攻击的效果值得怀疑。提出了一种新的增强先令攻击框架(AUSH),并结合生成对抗网络的思想实现了该框架。AUSH能够根据预算和复杂的攻击目标(如针对特定用户组)来定制针对RS的攻击。我们的实验表明,AUSH的攻击影响是显而易见的,在广泛的RS,包括经典和现代的基于深度学习的RS,而它几乎是无法检测到的最先进的攻击检测模型。

英文摘要:

Recommendation Systems (RS) have become an essential part of many online services. Due to its pivotal role in guiding customers towards purchasing, there is a natural motivation for unscrupulous parties to spoof RS for profits. In this paper, we study the shilling attack: a subsistent and profitable attack where an adversarial party injects a number of user profiles to promote or demote a target item. Conventional shilling attack models are based on simple heuristics that can be easily detected, or directly adopt adversarial attack methods without a special design for RS. Moreover, the study on the attack impact on deep learning based RS is missing in the literature, making the effects of shilling attack against real RS doubtful. We present a novel Augmented Shilling Attack framework (AUSH) and implement it with the idea of Generative Adversarial Network. AUSH is capable of tailoring attacks against RS according to budget and complex attack goals, such as targeting a specific user group. We experimentally show that the attack impact of AUSH is noticeable on a wide range of RS including both classic and modern deep learning based RS, while it is virtually undetectable by the state-of-the-art attack detection model.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑