Welcome! This is the page of our tutorial “Towards Secure and Robust Recommender Systems: Recent Advances and Future Prospectives” at The 18th ACM International Conference on Web Search and Data Mining (WSDM).
(Last update: 23/09/2024)
Time
CET 14:00 - 15:30, 10/03/2025
Description
As recommender systems (RS) continue to evolve, the field has seen a pivotal shift from model-centric to data-centric paradigms, where the quality, integrity, and security of data are increasingly becoming the key drivers of system performance and personalization. This transformation has unlocked new avenues for more precise and tailored recommendations, yet it also introduces significant challenges. As reliance on data intensifies, RS face mounting threats that can compromise both their effectiveness and user trust. These challenges include (1) Malicious Data Manipulation, where adversaries corrupt or tamper with datasets, distorting recommendation outcomes and undermining system reliability; (2) Data Privacy Leakage, where adversarial actors exploit system outputs to infer sensitive user information, leading to serious privacy concerns; and (3) Erroneous Data Noise, where inaccuracies, inconsistencies, and redundant data obscure the true user preferences, degrading recommendation quality and user satisfaction. By focusing on these critical data-centric challenges, this tutorial aims to equip participants with the knowledge to build RS that are secure, privacy-preserving, and resilient to data-driven threats, ensuring reliable and trustworthy performance in real-world environments. In addition, attendees will gain hands-on experience with our newly released toolkit for RS-based attacks and defenses, providing them with practical, actionable insights into safeguarding RS against emerging vulnerabilities.
Presenters
Hongzhi Yin is an ARC Future Fellow, Full Professor, and the Director of the Responsible Big Data Intelligence Lab at The University of Queensland. He has published 300+ papers with an H-index of 77, making notable contributions to recommender systems, graph learning, decentralized learning, and edge intelligence. He has rich lecture experience and taught five relevant courses, such as information retrieval and web search, social media analytics, and responsible data science. Additionally, he has delivered 20+ keynotes and tutorials at the top-tier conferences like WWW’17,22,24, DASFAA’23, and KDD’17.
Zongwei Wang is currently pursuing his Ph.D. at Chongqing University and is a visiting student at The University of Queensland. His research work has been published on top data mining conferences such as KDD, TIST, PAKDD, WSDM, etc. He has ample experience tutoring relevant courses and has presented his work at multiple top-tier conferences, such as KDD and PAKDD.
Junliang Yu is an ARC DECRA Fellow at the University of Queensland. His research interests include recommender systems, data-centric AI, and graph learning. With over 30 publications in premier venues, he is a recognized contributor in his field. He has delivered multiple lectures at summer schools and taught courses on recommender systems and social media analytics. He organized two well-received tutorials on self-supervised recommender systems at WWW’22 and DASFAA’23 and presented his work at multiple top-tier conferences.
Tong Chen is a Senior Lecturer and ARC DECRA Fellow at The University of Queensland. His research on lightweight, on-device, and trustworthy recommender systems has been published in top-tier international venues such as KDD, SIGIR, WWW, TKDE, WSDM, TNNLS, TOIS, and CIKM. He has ample track records in lecturing, evidenced by his course design and delivery experience in business analytics, teaching experience in data science, and invited tutorials on cutting-edge recommender systems at the WWW’22, 24, and DASFAA’23.
Shazia Sadiq is a Full Professor at The University of Queensland. Her research focuses on responsible data management and aims to reduce the socio-technical barriers to data-driven transformation. She is a Fellow of the Australian Academy of Technological Sciences and Engineering. Throughout her 25-year career, she has received numerous invitations to speak at prestigious conferences, academic institutions, and industry forums, delivering over 20 tutorials, talks, panels, and keynotes. One notable example is the Keynote talk at SIGMOD’23.
Min Gao works as a Full Professor at Chongqing University, China. She has published 100+ papers, making notable contributions to recommender systems and data mining. She has been SPC or PC for many top conferences, such as WWW, IJCAI, AAAI, KDD, WSDM, and CIKM. Prof. Min Gao has rich lecture experience and has taught three relevant courses, such as advanced machine learning, computer networks, and advanced database, and has presented her work at multiple top-tier conferences.
Outline
The tutorial is delivered as a lecture-style tutorial (3 hours in duration) that includes:
- Introduction (20 mins)
- Overview of Recommender Systems (5 mins)
- Introduction of Data-Centric Recommender Systems and its confronted Issues (15 mins)
- Securing Data Integrity - Defending Against Malicious Manipulation in Recommender Systems (40 mins)
- Motives and Types of Malicious Manipulation Attacks (20 mins)
- Defense Against Malicious Manipulation Attacks (20 mins)
- Preserving Data Privacy – Defending Against Adversarial Inference in Recommender Systems (40 mins)
- Types of Inference Attacks against Data Privacy (20 mins)
- Data Privacy-Preserving Methods (20 mins)
- Managing Data Noise – Overcoming the Impact of Inaccurate and Redundant Data in Recommender Systems (40 mins)
- Origins and Types of Data Noises (20 mins)
- Data Denoising Methods (20 mins)
- Research Limitations and Future Opportunities (20 mins)
- Extension of Existing Research Questions (10 mins)
- Security of Large Language Models-Driven Recommender Systems (10 mins)
- Open-source Toolkit for Robust and Secure Recommendation (20 mins)
Targeted Audience
This tutorial is designed for a broad audience, including academic and industrial researchers, graduate students, and practitioners from the recommendation field and related areas. By the end of the tutorial, participants will have a solid understanding of basic poisoning attacks and defensive strategies to enhance the robustness and security of recommendation systems. Additionally, they will gain hands-on experience using an open-source toolkit. While prior knowledge of recommendation systems is preferred, the tutorial will also cover foundational concepts to ensure better engagement and accessibility for all attendees.
Our papers on secure and robust recommendation
- Secure recommender system
- Stealthy attack on graph recommendation system. Expert Systems with Applications 124476(2024)
- Gray-Box Shilling Attack: An Adversarial Learning Approach. ACM TIST (2022)
- Unveiling Vulnerabilities of Contrastive Recommender Systems to Poisoning Attacks. In Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining (2024)
- Ready for emerging threats to recommender systems? A graph convolution-based generative shilling attack. Information Sciences (2021)
- Manipulating Federated Recommender Systems: Poisoning with Synthetic Users and Its Countermeasures. In Proceedings of the 43rd International ACM SIGIR Conference on Research and Development in Information Retrieval (2023)
- Manipulating Visually Aware Federated Recommender Systems and Its Countermeasures. ACM Transactions on Information Systems 42,3 (2023)
- Pipattack: Poisoning federated recommender systems for manipulating item promotion. In Proceedings of the Fifteenth ACM International Conference on Web Search and Data Mining (2022)
- Poisoning Decentralized Collaborative Recommender System and Its Countermeasures. In Proceedings of the 43rd International ACM SIGIR Conference on Research and Development in Information Retrieval (2024)
- Stealthy attack on graph recommendation system. Expert Systems with Applications 124476(2024)
- Robust recommender system
- Efficient Bi-Level Optimization for Recommendation Denoising. In Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining (2023)
- GCN-Based User Representation Learning for Unifying Robust Recommendation and Fraudster Detection. In Proceedings of the 43rd International ACM SIGIR Conference on Research and Development in Information Retrieval (2020)
- Efficient Bi-Level Optimization for Recommendation Denoising. In Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining (2023)
- A survey paper on the secure recommendation