{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/poisoning-attacks-against-recommender-systems","title":"Poisoning Attacks against Recommender Systems: A Survey","arxiv_id":"2401.01527","date":"2024-01-03","proceeding":null,"authors":["Zongwei Wang","Min Gao","Junliang Yu","Hao Ma","Hongzhi Yin","Shazia Sadiq"],"abstract":"Modern recommender systems (RS) have seen substantial success, yet they remain vulnerable to malicious activities, notably poisoning attacks. These attacks involve injecting malicious data into the training datasets of RS, thereby compromising their integrity and manipulating recommendation outcomes for gaining illicit profits. This survey paper provides a systematic and up-to-date review of the research landscape on Poisoning Attacks against Recommendation (PAR). A novel and comprehensive taxonomy is proposed, categorizing existing PAR methodologies into three distinct categories: Component-Specific, Goal-Driven, and Capability Probing. For each category, we discuss its mechanism in detail, along with associated methods. Furthermore, this paper highlights potential future research avenues in this domain. Additionally, to facilitate and benchmark the empirical comparison of PAR, we introduce an open-source library, ARLib, which encompasses a comprehensive collection of PAR models and common datasets. The library is released at https://github.com/CoderWZW/ARLib.","url_abs":"https://arxiv.org/abs/2401.01527v3","url_pdf":"https://arxiv.org/pdf/2401.01527v3.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"poisoning-attacks-against-recommender-systems","repo_url":"https://github.com/coderwzw/arlib","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok"}}],"tasks":[{"task_slug":"recommendation-systems","task_name":"Recommendation Systems"},{"task_slug":"survey","task_name":"Survey"}],"methods":[{"method_slug":null,"method_name":"Library"}],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2401.01527","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2401.01527"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/coderwzw/arlib","reach":{"status":"ok"}}],"summary":{"ran":6,"unverified":1},"by_repo_kind":{"official":{"samples":7,"ran":6,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":7,"samples":[{"code_sha256_prefix":"872ccfb6b9411067","entry":"InfoNCE","repo":"coderwzw/arlib","repo_kind":"official","path":"recommender/NCL.py","file_url":"https://github.com/coderwzw/arlib/blob/HEAD/recommender/NCL.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"872ccfb6b9411067"}},{"code_sha256_prefix":"e723cc5eb0b56ef1","entry":"alignment_loss","repo":"coderwzw/arlib","repo_kind":"official","path":"util/loss.py","file_url":"https://github.com/coderwzw/arlib/blob/HEAD/util/loss.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"e723cc5eb0b56ef1"}},{"code_sha256_prefix":"80b7004abe5dc932","entry":"bpr_loss","repo":"coderwzw/arlib","repo_kind":"official","path":"util/loss.py","file_url":"https://github.com/coderwzw/arlib/blob/HEAD/util/loss.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"80b7004abe5dc932"}},{"code_sha256_prefix":"c6ba2be120a102b6","entry":"l1","repo":"coderwzw/arlib","repo_kind":"official","path":"util/algorithm.py","file_url":"https://github.com/coderwzw/arlib/blob/HEAD/util/algorithm.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"c6ba2be120a102b6"}},{"code_sha256_prefix":"0f3d840cf39a09fa","entry":"l2","repo":"coderwzw/arlib","repo_kind":"official","path":"util/algorithm.py","file_url":"https://github.com/coderwzw/arlib/blob/HEAD/util/algorithm.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"0f3d840cf39a09fa"}},{"code_sha256_prefix":"02694243885b2434","entry":"wrmf_loss","repo":"coderwzw/arlib","repo_kind":"official","path":"util/loss.py","file_url":"https://github.com/coderwzw/arlib/blob/HEAD/util/loss.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"02694243885b2434"}},{"code_sha256_prefix":"e1222a969e6ed9c0","entry":"common","repo":"coderwzw/arlib","repo_kind":"official","path":"util/algorithm.py","file_url":"https://github.com/coderwzw/arlib/blob/HEAD/util/algorithm.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"e1222a969e6ed9c0"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}