User based collaborative filtering (CF) relies on a user and user similarity graph, making it vulnerable to profile injection (shilling) attacks that manipulate neighborhood relations to promote (push) or demote (nuke) target items. In this work, we propose an adversarial robustness based edge reweighting defense for CF. We first assign each user and user edge a non robustness score via spectral adversarial robustness evaluation, which quantifies the edge sensitivity to adversarial perturbations. We then attenuate the influence of non robust edges by reweighting similarities during prediction. Extensive experiments demonstrate that the proposed method effectively defends against various types of attacks.
翻译:基于用户的协同过滤(CF)依赖于用户及用户相似性图,使其容易受到配置文件注入(shilling)攻击,这些攻击通过操纵邻域关系来提升(push)或降低(nuke)目标物品的推荐。在本研究中,我们提出了一种基于对抗鲁棒性的边重加权防御方法用于CF。我们首先通过谱对抗鲁棒性评估为每个用户及用户边分配一个非鲁棒性分数,该分数量化了边对对抗扰动的敏感性。随后,在预测过程中通过重加权相似性来减弱非鲁棒边的影响。大量实验表明,所提方法能有效防御多种类型的攻击。