Towards Robust Recommender Systems via Triple Cooperative Defense

Wang, Qingyang; Lian, Defu; Wu, Chenwang; Chen, Enhong

doi:10.1007/978-3-031-20891-1_40

Cited by 3 publications

(1 citation statement)

References 34 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Except for the contributions in the preliminary work [19] on triple cooperative defense, we further deliver the following contributions: The rest of the paper is organized as follows: Section 2 introduces related work. Section 3 describes the threat model for recommendation poisoning.…”

Section: Introductionmentioning

confidence: 99%

Securing Recommender System via Cooperative Training

Wang

Lian

et al. 2023

Preprint

Self Cite

View full text Add to dashboard Cite

Recommender systems are often susceptible to well-crafted fake profiles, leading to biased recommendations. Among existing defense methods, data-processing based methods inevitably exclude normal samples, while model-based methods struggle to enjoy both generalization and robustness. To this end, we suggest integrating data processing and the robust model to propose a general framework, Triple Cooperative Defense (TCD), which employs three cooperative models that mutually enhance data and thereby improve recommendation robustness. Furthermore, Considering that existing attacks struggle to balance bi-level optimization and efficiency, we revisit poisoning attacks in recommender systems and introduce an efficient attack strategy, Co-training Attack (Co-Attack), which cooperatively optimizes the attack optimization and model training, considering the bi-level setting while maintaining attack efficiency. Moreover, we reveal a potential reason for the insufficient threat of existing attacks is their default assumption of optimizing attacks in undefended scenarios. This overly optimistic setting limits the potential of attacks. Consequently, we put forth a Game-based Co-training Attack (GCoAttack), which frames the proposed CoAttack and TCD as a game-theoretic process, thoroughly exploring CoAttack’s attack potential in the cooperative training of attack and defense. Extensive experiments on three real datasets demonstrate TCD’s superiority in enhancing model robustness. Additionally, we verify that the two proposed attack strategies significantly out perform existing attacks, with game-based GCoAttack posing a greater poisoning threat than CoAttack.

show abstract

Section: Introductionmentioning

confidence: 99%