Paper
2 May 2023 A data poisoning attack method for recommendation system based on dynamic adaptation of data and model
Xiaosai Wang, Jintao Tang, Qinhang Xu, Ting Wang
Author Affiliations +
Proceedings Volume 12642, Second International Conference on Electronic Information Engineering, Big Data, and Computer Technology (EIBDCT 2023); 126421E (2023) https://doi.org/10.1117/12.2674783
Event: Second International Conference on Electronic Information Engineering, Big Data and Computer Technology (EIBDCT 2023), 2023, Xishuangbanna, China
Abstract
Data poisoning attack has been one of the most prominent threats for data-driven machine learning model. Specifically, in the field of recommendation system, an attacker could manipulate recommendation results by injecting some crafted fake data into recommendation model. In this paper, a data poisoning attack method based on dynamic adaptation of data and model is proposed for the recommendation system, referred to as dynamic attack, which solves the problem that the fake data fails to keep aggressive due to difference between models. Experimental results on the two real datasets, MovieLens-100K and MovieLens-1M, show that dynamic attack outperforms existing heuristic-based attacks and the average attack success rate is increased by more than 10 times.
© (2023) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.
Xiaosai Wang, Jintao Tang, Qinhang Xu, and Ting Wang "A data poisoning attack method for recommendation system based on dynamic adaptation of data and model", Proc. SPIE 12642, Second International Conference on Electronic Information Engineering, Big Data, and Computer Technology (EIBDCT 2023), 126421E (2 May 2023); https://doi.org/10.1117/12.2674783
Advertisement
Advertisement
RIGHTS & PERMISSIONS
Get copyright permission  Get copyright permission on Copyright Marketplace
KEYWORDS
Data modeling

Neural networks

Mathematical optimization

Deep learning

Dynamical systems

Back to Top