IndirectAD: Practical Data Poisoning Attacks against Recommender Systems for Item Promotion

arXiv:2511.05845 · cs.CR · Submitted 2025-11-08 · Read on arXiv

cs.CR

Submitted: 2025-11-08

Updated: 2026-09-21

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Clustering — 10× in this paper · explained in 2 episodes
• Loss Function — 10× in this paper · explained in 2 episodes
• Adversarial Training — 6× in this paper · explained in 1 episode
• Robustness — 6× in this paper · explained in 5 episodes
• Transferability — 5× in this paper · explained in 4 episodes
• Adversarial Attacks — 4× in this paper · explained in 1 episode
• Benchmark — 3× in this paper · explained in 2 episodes
• Composite Loss Function — 3× in this paper · explained in 2 episodes
• Deep Neural Network — 3× in this paper
• Embeddings — 3× in this paper · explained in 2 episodes
• Reinforcement Learning — 3× in this paper · explained in 4 episodes
• Unified Framework — 3× in this paper · explained in 5 episodes
• Accuracy — 2× in this paper · explained in 1 episode
• Adam — 2× in this paper · explained in 2 episodes
• Adversarial Personalized Ranking — 2× in this paper
• Core — 2× in this paper · explained in 2 episodes
• Projected Gradient Descent — 2× in this paper
• Regularization — 2× in this paper · explained in 3 episodes
• AUC — 1× in this paper · explained in 2 episodes
• Active Learning — 1× in this paper · explained in 6 episodes
• Actor — 1× in this paper · explained in 3 episodes
• Consistency — 1× in this paper · explained in 3 episodes
• Federated Learning — 1× in this paper · explained in 15 episodes
• GNNs — 1× in this paper · explained in 2 episodes
• Generalization — 1× in this paper · explained in 13 episodes
• Generative Adversarial Networks (GANs) — 1× in this paper · explained in 3 episodes
• International Conference on Data Engineering — 1× in this paper
• Knowledge Graph — 1× in this paper · explained in 7 episodes
• Knowledge graphs — 1× in this paper · explained in 2 episodes
• Representation Learning — 1× in this paper · explained in 2 episodes
• Steering — 1× in this paper · explained in 2 episodes
• Transformer — 1× in this paper · explained in 2 episodes

Sources

• Data Poisoning Attacks to Deep Learning Based Recommender Systems
• BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain
• Hardware Trojan Attacks on Neural Networks
• On Detecting Data Pollution Attacks On Recommender Systems Using Sequential GANs

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs