Towards Robust Recommendation: A Review and an Adversarial Robustness Evaluation Library

• URL: http://arxiv.org/abs/2404.17844v1
• Date: Sat, 27 Apr 2024 09:44:56 GMT
• Title: Towards Robust Recommendation: A Review and an Adversarial Robustness Evaluation Library
• Authors: Lei Cheng, Xiaowen Huang, Jitao Sang, Jian Yu,
• Abstract summary: We provide a comprehensive overview of the robustness of recommender systems. In this survey, we categorize the robustness of recommender systems into adversarial robustness and non-adversarial robustness. We discuss the current challenges in the field of recommender system robustness and potential future research directions.
• Score: 27.50051402580845
• License:
• Abstract: Recently, recommender system has achieved significant success. However, due to the openness of recommender systems, they remain vulnerable to malicious attacks. Additionally, natural noise in training data and issues such as data sparsity can also degrade the performance of recommender systems. Therefore, enhancing the robustness of recommender systems has become an increasingly important research topic. In this survey, we provide a comprehensive overview of the robustness of recommender systems. Based on our investigation, we categorize the robustness of recommender systems into adversarial robustness and non-adversarial robustness. In the adversarial robustness, we introduce the fundamental principles and classical methods of recommender system adversarial attacks and defenses. In the non-adversarial robustness, we analyze non-adversarial robustness from the perspectives of data sparsity, natural noise, and data imbalance. Additionally, we summarize commonly used datasets and evaluation metrics for evaluating the robustness of recommender systems. Finally, we also discuss the current challenges in the field of recommender system robustness and potential future research directions. Additionally, to facilitate fair and efficient evaluation of attack and defense methods in adversarial robustness, we propose an adversarial robustness evaluation library--ShillingREC, and we conduct evaluations of basic attack models and recommendation models. ShillingREC project is released at https://github.com/chengleileilei/ShillingREC.

Related papers

• Improving the Shortest Plank: Vulnerability-Aware Adversarial Training for Robust Recommender System [60.719158008403376]
  Vulnerability-aware Adversarial Training (VAT) is designed to defend against poisoning attacks in recommender systems. VAT employs a novel vulnerability-aware function to estimate users' vulnerability based on the degree to which the system fits them.
  arXiv  Detail & Related papers  (2024-09-26T02:24:03Z)
• Revisiting Reciprocal Recommender Systems: Metrics, Formulation, and Method [60.364834418531366]
  We propose five new evaluation metrics that comprehensively and accurately assess the performance of RRS. We formulate the RRS from a causal perspective, formulating recommendations as bilateral interventions. We introduce a reranking strategy to maximize matching outcomes, as measured by the proposed metrics.
  arXiv  Detail & Related papers  (2024-08-19T07:21:02Z)
• FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data [15.555228739298045]
  We propose a new approach called fair recommendation with optimized antidote data (FairRoad) Our proposed antidote data generation algorithm significantly improve the fairness of recommender systems with a small amounts of antidote data.
  arXiv  Detail & Related papers  (2022-12-13T17:32:44Z)
• Towards Adversarially Robust Recommendation from Adaptive Fraudster Detection [9.756305372960423]
  GraphRfi, a GNN-based recommender system, was proposed and shown to effectively mitigate the impact of injected fake users. We demonstrate that GraphRfi remains vulnerable to attacks due to the supervised nature of its fraudster detection component. In particular, we propose a powerful poisoning attack, MetaC, against both GNN-based and MF-based recommender systems.
  arXiv  Detail & Related papers  (2022-11-08T15:38:43Z)
• Searching for Robust Neural Architectures via Comprehensive and Reliable Evaluation [6.612134996737988]
  We propose a novel framework, called Auto Adversarial Attack and Defense (AAAD), where we employ neural architecture search methods. We consider four types of robustness evaluations, including adversarial noise, natural noise, system noise and quantified metrics. The empirical results on the CIFAR10 dataset show that the searched efficient attack could help find more robust architectures.
  arXiv  Detail & Related papers  (2022-03-07T04:45:05Z)
• RGRecSys: A Toolkit for Robustness Evaluation of Recommender Systems [100.54655931138444]
  We propose a more holistic view of robustness for recommender systems that encompasses multiple dimensions. We present a robustness evaluation toolkit, Robustness Gym for RecSys, that allows us to quickly and uniformly evaluate the robustness of recommender system models.
  arXiv  Detail & Related papers  (2022-01-12T10:32:53Z)
• PipAttack: Poisoning Federated Recommender Systems forManipulating Item Promotion [58.870444954499014]
  A common practice is to subsume recommender systems under the decentralized federated learning paradigm. We present a systematic approach to backdooring federated recommender systems for targeted item promotion.
  arXiv  Detail & Related papers  (2021-10-21T06:48:35Z)
• Membership Inference Attacks Against Recommender Systems [33.66394989281801]
  We make the first attempt on quantifying the privacy leakage of recommender systems through the lens of membership inference. Our attack is on the user-level but not on the data sample-level. A shadow recommender is established to derive the labeled training data for training the attack model.
  arXiv  Detail & Related papers  (2021-09-16T15:19:19Z)
• RobustBench: a standardized adversarial robustness benchmark [84.50044645539305]
  Key challenge in benchmarking robustness is that its evaluation is often error-prone leading to robustness overestimation. We evaluate adversarial robustness with AutoAttack, an ensemble of white- and black-box attacks. We analyze the impact of robustness on the performance on distribution shifts, calibration, out-of-distribution detection, fairness, privacy leakage, smoothness, and transferability.
  arXiv  Detail & Related papers  (2020-10-19T17:06:18Z)
• Survey for Trust-aware Recommender Systems: A Deep Learning Perspective [48.2733163413522]
  It becomes critical to embrace a trustworthy recommender system. This survey provides a systemic summary of three categories of trust-aware recommender systems.
  arXiv  Detail & Related papers  (2020-04-08T02:11:55Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.