Rank List Sensitivity of Recommender Systems to Interaction Perturbations
Not on the map. Why?
Abstract (arXiv)
Prediction models can exhibit sensitivity with respect to training data: small changes in the training data can produce models that assign conflicting predictions to individual data points during test time. In this work, we study this sensitivity in recommender systems, where users' recommendations are drastically altered by minor perturbations in other unrelated users' interactions. We introduce a measure of stability for recommender systems, called Rank List Sensitivity (RLS), which measures how rank lists generated by a given recommender system at test time change as a result of a perturbation in the training data. We develop a method, CASPER, which uses cascading effect to identify the minimal and systematical perturbation to induce higher instability in a recommender system. Experiments on four datasets show that recommender models are overly sensitive to minor perturbations introduced randomly or via CASPER - even perturbing one random interaction of one user drastically changes the recommendation lists of all users. Importantly, with CASPER perturbation, the models generate more unstable recommendations for low-accuracy users (i.e., those who receive low-quality recommendations) than high-accuracy ones.
Key facts. Cited by 20 papers in the map (data through 7 Oct 2026). Builds on 42 of its 84 references that are in the map. First posted on arXiv 29 Jan 2022.
Builds on
42 of 84 references.
References · 42
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2014Learning Phrase Representations using RNN Encoder-Decoder for Statistical Machine Translationcited by 4,016
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2016Universal adversarial perturbationscited by 774
- 2017One pixel attack for fooling deep neural networkscited by 579
- 2020Estimating Training Data Influence by Tracing Gradient Descentcited by 565
- 2020Underspecification Presents Challenges for Credibility in Modern Machine Learningcited by 488
- 2019Predicting Dynamic Embedding Trajectory in Temporal Interaction Networkscited by 443
- 2019KGAT: Knowledge Graph Attention Network for Recommendationcited by 342
- 2020Weight Poisoning Attacks on Pre-trained Modelscited by 318
- 2017Certified Defenses for Data Poisoning Attackscited by 288
- 2019Simple Black-box Adversarial Attackscited by 249
30 more
- 2019Predictive Multiplicity in Classificationcited by 162
- 2016Improving the Robustness of Deep Neural Networks via Stability Trainingcited by 156
- 2021Evaluating the Robustness of Neural Language Models to Input Perturbationscited by 87
- 2016Data Poisoning Attacks on Factorization-Based Collaborative Filteringcited by 78
- 2020On Counterfactual Explanations under Predictive Multiplicitycited by 73
- 2018Community Interaction and Conflict on the Webcited by 72
- 2020Interactive Path Reasoning on Graph for Conversational Recommendationcited by 72
- 2021Characterizing Fairness Over the Set of Good Models Under Selective Labelscited by 65
- 2020Influence Function based Data Poisoning Attacks to Top-N Recommender Systemscited by 61
- 2018Poisoning Attacks to Graph-Based Recommender Systemscited by 52
- 2019Data Poisoning Attacks on Stochastic Banditscited by 52
- 2018RepeatNet: A Repeat Aware Neural Recommendation Machine for Session-based Recommendationcited by 51
- 2017Generative Poisoning Attack Method Against Neural Networkscited by 49
- 2020Exploring Data Splitting Strategies for the Evaluation of Recommendation Modelscited by 48
- 2021Data Poisoning Attacks to Deep Learning Based Recommender Systemscited by 41
- 2021Leave-one-out Unfairnesscited by 36
- 2021Black-Box Attacks on Sequential Recommenders via Data-Free Model Extractioncited by 34
- 2021Dynamic Graph Collaborative Filteringcited by 33
- 2020Revisiting Adversarially Learned Injection Attacks Against Recommender Systemscited by 30
- 2020Practical Data Poisoning Attack against Next-Item Recommendationcited by 27
- 2020Poison Attacks against Text Datasets with Conditional Adversarially Regularized Autoencodercited by 27
- 2017UPSET and ANGRI : Breaking High Performance Image Classifierscited by 19
- 2021Loss-Aversively Fair Classificationcited by 18
- 2021PETGEN: Personalized Text Generation Attack on Deep Sequence Embedding-based Classification Modelscited by 17
- 2015VEWS: A Wikipedia Vandal Early Warning Systemcited by 12
- 2020Adversarial Item Promotion: Vulnerabilities at the Core of Top-N Recommenders that Use Images to Address Cold Startcited by 11
- 2020A Black-Box Attack Model for Visually-Aware Recommender Systemscited by 11
- 2020Adversarial Attacks and Detection on Reinforcement Learning-Based Interactive Recommender Systemscited by 9
- 2021Understanding Prediction Discrepancies in Machine Learning Classifierscited by 6
- 2021IACN: Influence-aware and Attention-based Co-evolutionary Network for Recommendationcited by 3
Built on by
Citing papers per year: 2022: 2; 2023: 4; 2024: 11; 2025: 2; 2026: 1.
20 papers.
Sort:
By area:
- 2023Benchmarking Cognitive Biases in Large Language Models as Evaluatorscited by 147
- 2022Training Data Influence Analysis and Estimation: A Surveycited by 134
- 2024Training Data Attribution via Approximate Unrolled Differentiationcited by 33
- 2024Does It Look Sequential? An Analysis of Datasets for Evaluation of Sequential Recommendationscited by 15
- 2024An Experimental Study on the Rashomon Effect of Balancing Methods in Imbalanced Classificationcited by 11
- 2024Concept -- An Evaluation Protocol on Conversational Recommender Systems with System-centric and User-centric Factorscited by 9
- 2024Algorithmic Collective Action in Recommender Systems: Promoting Songs by Reordering Playlistscited by 7
- 2023Integrating Item Relevance in Training Loss for Sequential Recommender Systemscited by 4
- 2024Stability and Multigroup Fairness in Ranking with Uncertain Predictionscited by 4
- 2022Towards Adversarially Robust Recommendation from Adaptive Fraudster Detectioncited by 3
- 2024Empowering Interdisciplinary Insights with Dynamic Graph Embedding Trajectoriescited by 3
- 2023Towards More Robust and Accurate Sequential Recommendation with Cascade-guided Adversarial Trainingcited by 2
8 more
- 2023Investigating the Robustness of Sequential Recommender Systems Against Training Data Perturbationscited by 2
- 2024FINEST: Stabilizing Recommendations by Rank-Preserving Fine-Tuningcited by 2
- 2024IntentRec: Predicting User Session Intent with Hierarchical Multi-Task Learningcited by 1
- 2025Regretful Decisions under Label Noisecited by 1
- 2025Assumption-free stability for ranking problemscited by 1
- 2024Securing Recommender System via Cooperative Trainingcited by 0
- 2024Adapting Dual-encoder Vision-language Models for Paraphrased Retrievalcited by 0
- 2026Decoupled Learning and Selection in Slate Recommendation for Privacy and Stability Under Noisy Scorescited by 0
- 2026Decoupled Learning and Selection in Slate Recommendation for Privacy and Stability Under Noisy Scores24 Sep 2026
- 2025Assumption-free stability for ranking problems2 Jun 2025
- 2025Regretful Decisions under Label Noise12 Apr 2025
- 2024Does It Look Sequential? An Analysis of Datasets for Evaluation of Sequential Recommendations21 Aug 2024
- 2024IntentRec: Predicting User Session Intent with Hierarchical Multi-Task Learning25 Jul 2024
- 2024Empowering Interdisciplinary Insights with Dynamic Graph Embedding Trajectories25 Jun 2024
- 2024Training Data Attribution via Approximate Unrolled Differentiation20 May 2024
- 2024Adapting Dual-encoder Vision-language Models for Paraphrased Retrieval6 May 2024
- 2024Concept -- An Evaluation Protocol on Conversational Recommender Systems with System-centric and User-centric Factors4 Apr 2024
- 2024An Experimental Study on the Rashomon Effect of Balancing Methods in Imbalanced Classification22 Mar 2024
- 2024Algorithmic Collective Action in Recommender Systems: Promoting Songs by Reordering Playlists19 Mar 2024
- 2024Stability and Multigroup Fairness in Ranking with Uncertain Predictions14 Feb 2024
8 more
- 2024FINEST: Stabilizing Recommendations by Rank-Preserving Fine-Tuning5 Feb 2024
- 2024Securing Recommender System via Cooperative Training23 Jan 2024
- 2023Benchmarking Cognitive Biases in Large Language Models as Evaluators29 Sep 2023
- 2023Investigating the Robustness of Sequential Recommender Systems Against Training Data Perturbations24 Jul 2023
- 2023Integrating Item Relevance in Training Loss for Sequential Recommender Systems18 May 2023
- 2023Towards More Robust and Accurate Sequential Recommendation with Cascade-guided Adversarial Training11 Apr 2023
- 2022Training Data Influence Analysis and Estimation: A Survey9 Dec 2022
- 2022Towards Adversarially Robust Recommendation from Adaptive Fraudster Detection8 Nov 2022
- 2023Benchmarking Cognitive Biases in Large Language Models as Evaluatorscited by 147
- 2022Training Data Influence Analysis and Estimation: A Surveycited by 134
- 2024Training Data Attribution via Approximate Unrolled Differentiationcited by 33
- 2024Does It Look Sequential? An Analysis of Datasets for Evaluation of Sequential Recommendationscited by 15
- 2024An Experimental Study on the Rashomon Effect of Balancing Methods in Imbalanced Classificationcited by 11
- 2024Concept -- An Evaluation Protocol on Conversational Recommender Systems with System-centric and User-centric Factorscited by 9
- 2024Algorithmic Collective Action in Recommender Systems: Promoting Songs by Reordering Playlistscited by 7
- 2023Integrating Item Relevance in Training Loss for Sequential Recommender Systemscited by 4
- 2024Stability and Multigroup Fairness in Ranking with Uncertain Predictionscited by 4
- 2022Towards Adversarially Robust Recommendation from Adaptive Fraudster Detectioncited by 3
- 2024Empowering Interdisciplinary Insights with Dynamic Graph Embedding Trajectoriescited by 3
- 2023Towards More Robust and Accurate Sequential Recommendation with Cascade-guided Adversarial Trainingcited by 2
12 most cited of 19 All 19 (JSON)
- 2026Decoupled Learning and Selection in Slate Recommendation for Privacy and Stability Under Noisy Scores24 Sep 2026
- 2025Assumption-free stability for ranking problems2 Jun 2025
- 2025Regretful Decisions under Label Noise12 Apr 2025
- 2024Does It Look Sequential? An Analysis of Datasets for Evaluation of Sequential Recommendations21 Aug 2024
- 2024IntentRec: Predicting User Session Intent with Hierarchical Multi-Task Learning25 Jul 2024
- 2024Empowering Interdisciplinary Insights with Dynamic Graph Embedding Trajectories25 Jun 2024
- 2024Training Data Attribution via Approximate Unrolled Differentiation20 May 2024
- 2024Concept -- An Evaluation Protocol on Conversational Recommender Systems with System-centric and User-centric Factors4 Apr 2024
- 2024An Experimental Study on the Rashomon Effect of Balancing Methods in Imbalanced Classification22 Mar 2024
- 2024Algorithmic Collective Action in Recommender Systems: Promoting Songs by Reordering Playlists19 Mar 2024
- 2024Stability and Multigroup Fairness in Ranking with Uncertain Predictions14 Feb 2024
- 2024FINEST: Stabilizing Recommendations by Rank-Preserving Fine-Tuning5 Feb 2024
12 newest of 19 All 19 (JSON)