mlsanityData to 14 Oct 2026

Shilling Recommender Systems by Generating Side-feature-aware Fake User Profiles

arXiv 2509.17918 ↗First posted 22 Sep 2025cs.IR cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

Recommender systems (RS) greatly influence users' consumption decisions, making them attractive targets for malicious shilling attacks that inject fake user profiles to manipulate recommendations. Existing shilling methods can generate effective and stealthy fake profiles when training data only contain rating matrix, but they lack comprehensive solutions for scenarios where side features are present and utilized by the recommender. To address this gap, we extend the Leg-UP framework by enhancing the generator architecture to incorporate side features, enabling the generation of side-feature-aware fake user profiles. Experiments on benchmarks show that our method achieves strong attack performance while maintaining stealthiness.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 15 of its 23 references that are in the map. First posted on arXiv 22 Sep 2025.

Builds on

15 of 23 references.

References · 15

  1. 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,166
  2. 2017FiLM: Visual Reasoning with a General Conditioning Layercited by 2,333
  3. 2017Improved Training of Wasserstein GANscited by 2,235
  4. 2018Spectral Normalization for Generative Adversarial Networkscited by 1,636
  5. 2018cGANs with Projection Discriminatorcited by 254
  6. 2019PyOD: A Python Toolbox for Scalable Outlier Detectioncited by 222
  7. 2021PipAttack: Poisoning Federated Recommender Systems forManipulating Item Promotioncited by 37
  8. 2022A Comprehensive Survey on Trustworthy Recommender Systemscited by 32
  9. 2022Knowledge-enhanced Black-box Attacks for Recommendationscited by 26
  10. 2022FedAttack: Effective and Covert Poisoning Attack on Federated Recommendation via Hard Samplingcited by 22
  11. 2022Shilling Black-box Recommender Systems by Learning to Generate Fake User Profilescited by 15
  12. 2024Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasurescited by 14
3 more
  1. 2022Poisoning Deep Learning Based Recommender Model in Federated Learning Scenarioscited by 13
  2. 2025Retrieval-Augmented Review Generation for Poisoning Recommender Systemscited by 3
  3. 2025RSAttAE: An Information-Aware Attention-based Autoencoder Recommender Systemcited by 1

Built on by

Not cited yet.