A survey on Adversarial Recommender Systems: from Attack/Defense strategies to Generative Adversarial Networks
arXiv:2005.10322
Abstract
Latent-factor models (LFM) based on collaborative filtering (CF), such as matrix factorization (MF) and deep CF methods, are widely used in modern recommender systems (RS) due to their excellent performance and recommendation accuracy. However, success has been accompanied with a major new arising challenge: many applications of machine learning (ML) are adversarial in nature. In recent years, it has been shown that these methods are vulnerable to adversarial examples, i.e., subtle but non-random perturbations designed to force recommendation models to produce erroneous outputs. The goal of this survey is two-fold: (i) to present recent advances on adversarial machine learning (AML) for the security of RS (i.e., attacking and defense recommendation models), (ii) to show another successful application of AML in generative adversarial networks (GANs) for generative applications, thanks to their ability for learning (high-dimensional) data distributions. In this survey, we provide an exhaustive literature review of 74 articles published in major RS and ML journals and conferences. This review serves as a reference for the RS community, working on the security of RS or on generative models using GANs to improve their quality.
arXiv comment37 pages, submitted to journal
References in corpus (34)
- Distilling the Knowledge in a Neural Network
- Conditional Generative Adversarial Nets
- BPR: Bayesian Personalized Ranking from Implicit Feedback
- Categorical Reparameterization with Gumbel-Softmax
- Conditional Image Synthesis With Auxiliary Classifier GANs
- ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models
- Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples
- Improved Techniques for Training GANs
- Poisoning Attacks against Support Vector Machines
- BEGAN: Boundary Equilibrium Generative Adversarial Networks
- On Evaluating Adversarial Robustness
- Adversarial Attacks and Defences: A Survey
- Adversarial Personalized Ranking for Recommendation
- Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods
- Defensive Distillation is Not Robust to Adversarial Examples
- Support Vector Machines under Adversarial Label Contamination
- GraphGAN: Graph Representation Learning with Generative Adversarial Nets
- Adversarial Variational Bayes: Unifying Variational Autoencoders and Generative Adversarial Networks
- Data Poisoning Attacks on Factorization-Based Collaborative Filtering
- Estimating the Causal Impact of Recommendation Systems from Observational Data
- Generative Adversarial User Model for Reinforcement Learning Based Recommendation System
- Learning to Pivot with Adversarial Networks
- Privacy-Aware Recommendation with Private-Attribute Protection using Adversarial Learning
- Domain-Adversarial Training of Neural Networks
- A Survey of Adversarial Learning on Graphs
- Adversarial Examples in Modern Machine Learning: A Review
- CnGAN: Generative Adversarial Networks for Cross-network user preference generation for non-overlapped users
- Compatibility Family Learning for Item Recommendation and Generation
- GAN: Complementary Fashion Item Recommendation
- Domain-to-Domain Translation Model for Recommender System
- Poisoning Behavioral Malware Clustering
- Adversarial Item Promotion: Vulnerabilities at the Core of Top-N Recommenders that Use Images to Address Cold Start
- Multi-Step Adversarial Perturbations on Recommender Systems Embeddings
- An Empirical Study of DNNs Robustification Inefficacy in Protecting Visual Recommenders