Cited by 311Privacy-Preserving Technologies in DataPrivacy, Security, and Data ProtectionRecommender Systems and Techniques

"You Might Also Like:" Privacy Risks of Collaborative Filtering

Calandrino, Joseph A., Kilzer, Ann, Narayanan, Arvind, Felten, Edward W., Shmatikov, Vitaly·2011·2011 IEEE Symposium on Security and Privacy

Abstract

Many commercial websites use recommender systems to help customers locate products and content. Modern recommenders are based on collaborative filtering: they use patterns learned from users' behavior to make recommendations, usually in the form of related-items lists. The scale and complexity of these systems, along with the fact that their outputs reveal only relationships between items (as opposed to information about users), may suggest that they pose no meaningful privacy risk. In this paper, we develop algorithms which take a moderate amount of auxiliary information about a customer and infer this customer's transactions from temporal changes in the public outputs of a recommender system. Our inference attacks are passive and can be carried out by any Internet user. We evaluate their feasibility using public data from popular websites Hunch, Last. fm, Library Thing, and Amazon.

Integrity signals

Registry

Crossref · 10.1109/sp.2011.40

Cites

29 of 29 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Cites

Flagged first, then by citations

1 of the 30 references couldn’t be matched to a known paper.

Cited by

Sorted by citations

Authors
Calandrino, J. A., Kilzer, A., Narayanan, A., Felten, E. W., & Shmatikov, V.
Affiliations
  • Princeton University (US)
  • The University of Texas at Austin (US)
  • Stanford University (US)
Venue
2011 IEEE Symposium on Security and Privacy
Publisher
IEEE
Published
2011-05
Pages
231-246
ISSN
1081-6011 (ISSN-L)
OpenAlex
W2123147099
Cited by
311
References
30
Citations by year
2026: 6 · 2025: 6 · 2024: 22 · 2023: 16 · 2022: 22 · 2021: 21 · 2020: 25 · 2019: 28 · 2018: 23 · 2017: 29 · 2016: 29 · 2015: 21 · 2014: 28 · 2013: 20 · 2012: 9
FWCI
15.52
Type
conference paper
Language
en
Open access
closed
Locations
IEEE Symposium on Security and Privacy (S&P) (publishedVersion)
Funders
  • National Science Foundation
  • U.S. Department of Energy
  • Multidisciplinary University Research Initiative
  • Air Force Office of Scientific Research
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
  • Social Sciences › Sociology and Political Science › Privacy, Security, and Data Protection
  • Physical Sciences › Computer Science › Information Systems › Recommender Systems and Techniques
Keywords
collaborative filtering, recommender systems, privacy risks, inference attacks, passive attacks, user behavior data, commercial websites

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review