arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2409.07500cs.CRcs.IR
收藏

DV-FSR:一种面向联邦序列推荐的双视图目标攻击框架

DV-FSR: A Dual-View Target Attack Framework for Federated Sequential Recommendation

Qitao Qin, Yucong Luo, Mingyue Cheng, Qingyang Mao, Chenyi Lei

AI总结:

针对联邦序列推荐中现有定向攻击效果有限的问题,本文提出双视图攻击框架DV-FSR,结合采样显式策略与对比学习隐式梯度策略协同攻击,并设计对应防御机制,在代表性序列模型上验证了其有效性。

摘要:

联邦推荐(FedRec)通过支持个性化模型的去中心化训练来保护用户隐私,但这种架构本质上容易受到对抗性攻击。受商业和社会影响力方面的考虑驱动,针对FedRec系统的定向攻击已有大量研究。然而,这些工作大多在很大程度上忽视了推荐模型在鲁棒性上的差异。此外,我们的实证结果表明,现有的定向攻击方法在联邦序列推荐(FSR)任务中只能取得有限的效果。基于这些观察,我们专注于研究FSR中的定向攻击,并提出了一种新颖的双视图攻击框架,命名为DV-FSR。该攻击方法独特地结合了基于采样的显式策略与基于对比学习的隐式梯度策略,以协调实施攻击。此外,我们引入了一种专门针对FSR中定向攻击设计的防御机制,旨在评估我们所提出的攻击方法的缓解效果。大量实验在代表性序列模型上验证了我们所提方法的有效性。

英文摘要:

Federated recommendation (FedRec) preserves user privacy by enabling decentralized training of personalized models, but this architecture is inherently vulnerable to adversarial attacks. Significant research has been conducted on targeted attacks in FedRec systems, motivated by commercial and social influence considerations. However, much of this work has largely overlooked the differential robustness of recommendation models. Moreover, our empirical findings indicate that existing targeted attack methods achieve only limited effectiveness in Federated Sequential Recommendation (FSR) tasks. Driven by these observations, we focus on investigating targeted attacks in FSR and propose a novel dualview attack framework, named DV-FSR. This attack method uniquely combines a sampling-based explicit strategy with a contrastive learning-based implicit gradient strategy to orchestrate a coordinated attack. Additionally, we introduce a specific defense mechanism tailored for targeted attacks in FSR, aiming to evaluate the mitigation effects of the attack method we proposed. Extensive experiments validate the effectiveness of our proposed approach on representative sequential models.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑