Attacking a recommender
system
¢
Introduce new users who rate target
item with high/low value
¢
¢
To avoid detection, rank other items to
force user’s mean to average value
and its ratings distribution to be
normal
¢