<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Gowalla &#8211; Science</title>
	<atom:link href="https://scienmag.com/tag/gowalla/feed/" rel="self" type="application/rss+xml" />
	<link>https://scienmag.com</link>
	<description></description>
	<lastBuildDate>Thu, 01 Oct 2026 11:14:18 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.2</generator>

<image>
	<url>https://scienmag.com/wp-content/uploads/2024/07/cropped-scienmag_ico-32x32.jpg</url>
	<title>Gowalla &#8211; Science</title>
	<link>https://scienmag.com</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">73899611</site>	<item>
		<title>New AI Model Reads the Rhythms of Human Movement to Predict Where You Will Go Next</title>
		<link>https://scienmag.com/new-ai-model-reads-the-rhythms-of-human-movement-to-predict-where-you-will-go-next/</link>
		
		<dc:creator><![CDATA[Violet Maxwell]]></dc:creator>
		<pubDate>Thu, 01 Oct 2026 11:14:18 +0000</pubDate>
				<category><![CDATA[Earth Science]]></category>
		<category><![CDATA[advances in location-based services]]></category>
		<category><![CDATA[AI-based location prediction models]]></category>
		<category><![CDATA[deep learning]]></category>
		<category><![CDATA[deformable convolution]]></category>
		<category><![CDATA[Foursquare]]></category>
		<category><![CDATA[geographic patterns]]></category>
		<category><![CDATA[Gowalla]]></category>
		<category><![CDATA[human behavior and routine modeling]]></category>
		<category><![CDATA[human mobility]]></category>
		<category><![CDATA[Human movement pattern analysis]]></category>
		<category><![CDATA[location recommendation system improvements]]></category>
		<category><![CDATA[location-aware security systems]]></category>
		<category><![CDATA[location-based social networks]]></category>
		<category><![CDATA[MultiPerG convolution network]]></category>
		<category><![CDATA[next point of interest prediction]]></category>
		<category><![CDATA[periodic patterns]]></category>
		<category><![CDATA[POI recommendation]]></category>
		<category><![CDATA[predictive analytics for human mobility]]></category>
		<category><![CDATA[sequence modeling]]></category>
		<category><![CDATA[social analysis through movement data]]></category>
		<category><![CDATA[streams of check-in data analysis]]></category>
		<category><![CDATA[temporal convolutional network]]></category>
		<category><![CDATA[time bias in movement prediction]]></category>
		<category><![CDATA[trajectory mining]]></category>
		<guid isPermaLink="false">https://scienmag.com/?p=222290</guid>

					<description><![CDATA[Researchers have developed MultiPerG, a hierarchical convolutional network that learns multi-scale periodic and geographic patterns in human trajectories to predict a user's next point of interest more accurately than existing methods.]]></description>
										<content:encoded><![CDATA[<p>Every one of us is a creature of habit. We grab coffee at the same corner café each weekday morning, visit the gym on predictable evenings, and drift toward familiar neighborhoods on weekends. That deep regularity, hidden inside the streams of check-ins we leave on platforms like Foursquare and Yelp, is exactly what a team of Chinese researchers set out to capture. In a study published in the open-access journal Vicinagearth, they introduce MultiPerG, a Multiple Periodic Geography convolution network designed to predict a person&#8217;s next point of interest, or POI, with unprecedented accuracy. The work matters because next-location prediction underpins a surprising range of services, from intelligent signal processing and social analysis to location-aware security systems, and because the researchers argue that most existing approaches have been reading our movement histories in fundamentally the wrong way.</p>
<p>The core problem, as the authors describe it, is that conventional recommendation systems treat a user&#8217;s trajectory as a simple sequence of visits and then model only the consecutive correlations between neighboring check-ins. That strategy is vulnerable to what the team calls time bias. Real people deviate from their routines: a commuter catches a later train, a lunch appointment shifts by forty minutes, an errand is skipped one week and doubled up the next. Sequence models that latch onto exact consecutive orderings are easily corrupted by these deviations and by random noise in the data. Worse, most methods ignore periodicity altogether or rely on pre-specified intervals and fixed ranges, hard-coded assumptions that prevent the model from learning the true rhythm of a user&#8217;s life adaptively. The researchers also identified a second blind spot: geography. Existing systems tend to reason about spatial proximity at a single, fine-grained scale, even though human mobility is organized hierarchically across neighborhoods, cities, and regions.</p>
<p>Before building their model, the team examined real-world data from Foursquare and found striking statistical evidence for both kinds of regularity. Users&#8217; trajectories showed multi-span temporal patterns, meaning activity tendencies differ across periods such as weekdays versus rest days, and multi-interval patterns, in which a person returns to the same location after a roughly fixed gap, such as every day or every four hours. Spatially, different users roam across regions of very different extent, from a few city blocks to entire metropolitan areas. These observations framed the design brief for MultiPerG: the model needed to discover periodic patterns at multiple intervals and spans without being told what they are, tolerate the small biases that come with human behavior, and read geographic structure at multiple scales simultaneously.</p>
<p>Architecturally, MultiPerG is a hierarchical framework built on the foundations of temporal convolutional networks, or TCNs, a family of sequence models that use causal convolutions, which prevent information from the future leaking into the past, and dilated convolutions, which deliberately skip positions to widen the network&#8217;s receptive field. The researchers transform a user&#8217;s check-in history into a sequence feature map, a matrix analogous to an image in computer vision, by segmenting the week into equal one-hour gaps over seven days. Candidate locations are likewise converted into a geography feature map by gridding GPS coordinates into equal-area units, and this map is built hierarchically so that each level represents a coarser spatial granularity. A codebook stores the coordinates of every location across all scale levels, allowing the network to look up where any given POI sits within the multi-scale geographic structure.</p>
<p>The heart of the innovation lies in three novel kinds of deformable blocks. The first two handle time. A multi-interval deformable tree layer arranges dilated causal convolutions into a binary-tree structure, with left and right branches preserving the outermost elements of each segment. The convolutions carry learnable deformable offsets, a technique borrowed from deformable convolutional networks in computer vision, which let the sampling positions of each kernel float slightly rather than sitting at fixed intervals. In practice, these offsets absorb the consecutive time bias and accidental fluctuations produced by deviant visits, so the model can still detect that a user returns to a place roughly every day even when the actual visits drift by an hour or two. A second, segment-tree-structured layer works in the complementary direction, combining adjacent segments of the sequence into progressively larger spans so that patterns like day-long or month-long routines emerge adaptively. The outputs of the interval and span layers are then multiplied together to form a joint periodic representation of the user&#8217;s habits.</p>
<p>The third block addresses space. The geo-span learning layer stacks two-dimensional dilated causal convolutions across the hierarchical levels of the geography feature map, capturing spatial dependence at scales ranging from fine urban units up to broad regions. The authors note a subtle problem with this design: when locations are discretized onto maps, noise arises because two places that fall into the same unit at one scale may belong to distinct sections at a finer scale. To suppress this, they introduce a custom non-linear activation function called tan, described as the counterpart of tanh in the complex domain via Euler&#8217;s formula, whose steep gradient behavior approaching infinity amplifies large-scale influence while diminishing small-scale noise. After amplification and normalization, the outputs of all geographic levels are summed with adjusted weights, and the learned geographic patterns are combined with the periodic sequence patterns to produce, through a query embedding, a probability for every candidate location.</p>
<p>Training uses a cross-entropy loss summed over users, with randomly selected negative samples, and the network is optimized with Adam and mini-batch stochastic gradient descent. The team evaluated MultiPerG against eleven state-of-the-art baselines spanning four methodological families: CNN-based models such as Caser, CosRec, NextItNet and NASR; attention-based models including TiSASRec, STAN and ASPPA; the graph-neural-network-based CyGNet; and RNN-based models LSTPM and PLSPL. Experiments ran ten times on NVIDIA V100 GPUs with baselines fine-tuned for fairness, using four datasets: Foursquare check-ins from New York City and Tokyo, Yelp data from Tucson, and the full Gowalla dataset, filtered to remove inactive users and locations.</p>
<p>The results were decisive. MultiPerG outperformed every baseline on every recall metric at cutoffs of five, ten and twenty recommendations. On the New York and Tokyo datasets it improved Recall@5 by 5.5 and 6.4 percent respectively over the strongest competitor, the LSTM-based PLSPL, and on Gowalla the gains were larger still, at 10.5 percent for Recall@5 and 11.8 percent for Recall@10. The comparison also yielded interesting secondary findings: recurrent models excelled at personalized accuracy but lagged on generalized performance, while models built on temporal convolutional networks with large receptive fields, such as NASR and NextItNet, fared best among the CNN family. Ablation studies confirmed that every module earns its place. Removing the geo-span layer hurt most, underscoring how much geography contributes to next-POI prediction, while removing the interval layer cost slightly more than removing the span layer, suggesting interval periodicity is marginally more influential. Embedding dimensions of roughly 50 to 60 proved sufficient, and a modest geography map size of 128 units performed well.</p>
<p>Perhaps most compelling are the interpretability analyses. Heatmaps of the interval and span layer outputs for 32 New York users over 72 hours revealed a clear four-hour interval pattern during daytime hours, stronger relevance among midnight spans, and an overarching 24-hour daily repetition in both, matching the expected rhythm of human activity. The deformable offsets visibly corrected time bias in the trajectories. Geographic heatmaps, meanwhile, showed clustered high-relevance zones that align with users&#8217; real activity centers: in the New York data the hot zones match the densest check-in areas, and in Gowalla they correspond to Texas and California, the two states contributing the most data. The authors conclude that MultiPerG&#8217;s advantage stems precisely from its ability to explore periodic patterns, and they point toward future work on more variations of the geography blocks and more generalized periodicity recovery. For now, the study offers a vivid demonstration that the key to predicting where someone will go next lies not just in where they have been, but in the nested rhythms of time and space that shape every journey.</p>
<p><strong>Subject of Research:</strong> Next point-of-interest recommendation using periodic and geographic pattern learning in human trajectory data</p>
<p><strong>Article Title:</strong> MultiPerG: Multiple Periodic Geography convolution for next POI recommendation</p>
<p><strong>Article References:</strong> Wang, X., Wang, B., Wang, D., Wang, Z., Sun, G., Zhao, B., &amp; Chen, M. (2025). MultiPerG: Multiple Periodic Geography convolution for next POI recommendation. <em>Vicinagearth, 2</em>(1), Article 3. <a href="https://doi.org/10.1007/s44336-025-00012-1" rel="noopener noreferrer">https://doi.org/10.1007/s44336-025-00012-1</a></p>
<p><strong>Image Credits:</strong> AI Generated</p>
<p><strong>DOI:</strong> <a href="https://doi.org/10.1007/s44336-025-00012-1" rel="noopener noreferrer">10.1007/s44336-025-00012-1</a></p>
<p><strong>Keywords:</strong> POI recommendation, human mobility, temporal convolutional network, periodic patterns, geographic patterns, deformable convolution, location-based social networks, sequence modeling, deep learning, trajectory mining, Foursquare, Gowalla</p>
]]></content:encoded>
					
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">222290</post-id>	</item>
		<item>
		<title>New AI Model Maps How Location Shapes Social Influence Online</title>
		<link>https://scienmag.com/new-ai-model-maps-how-location-shapes-social-influence-online/</link>
		
		<dc:creator><![CDATA[Denise Maddox]]></dc:creator>
		<pubDate>Sun, 13 Sep 2026 01:55:05 +0000</pubDate>
				<category><![CDATA[Technology and Engineering]]></category>
		<category><![CDATA[advanced frameworks for social influence measurement]]></category>
		<category><![CDATA[Brightkite]]></category>
		<category><![CDATA[combining network embeddings with spatial homophily]]></category>
		<category><![CDATA[Foursquare]]></category>
		<category><![CDATA[GeoSocial2Vec]]></category>
		<category><![CDATA[geospatial data integration for online influence]]></category>
		<category><![CDATA[Gowalla]]></category>
		<category><![CDATA[heterogeneous graph]]></category>
		<category><![CDATA[impact of geographic proximity on social influence]]></category>
		<category><![CDATA[influence estimation in social media platforms]]></category>
		<category><![CDATA[leveraging location data for social influence insights]]></category>
		<category><![CDATA[location-based social network analysis]]></category>
		<category><![CDATA[location-based social networks]]></category>
		<category><![CDATA[node embeddings]]></category>
		<category><![CDATA[random walk]]></category>
		<category><![CDATA[representation learning]]></category>
		<category><![CDATA[social influence]]></category>
		<category><![CDATA[social influence mapping through geographic footprints]]></category>
		<category><![CDATA[spatial behavior and online influence correlation]]></category>
		<category><![CDATA[spatial homophily]]></category>
		<category><![CDATA[targeted advertising]]></category>
		<category><![CDATA[targeted advertising using location and social data]]></category>
		<category><![CDATA[user similarity metrics in social networks]]></category>
		<category><![CDATA[viral marketing and behavior prediction models]]></category>
		<category><![CDATA[word-of-mouth dynamics and user similarity]]></category>
		<guid isPermaLink="false">https://scienmag.com/?p=200620</guid>

					<description><![CDATA[Researchers have developed two frameworks that fuse network embeddings with spatial homophily to estimate social influence in location-based social networks more accurately than classical methods.]]></description>
										<content:encoded><![CDATA[<p>Every time a person checks in at a café, a park, or an airport using a location-based social network, they leave behind two intertwined traces: a social tie to other users and a geographic footprint of where they have been. A new study published in the Journal of Big Data argues that these two traces, when fused intelligently, reveal far more about who influences whom online than either signal alone. The research, led by Zahra Sadat Sajjadi, Zohreh Sadat Akhavan-Hejazi, and Mostafa Ghobaei-Arani of the Islamic Azad University in Iran, introduces two frameworks that combine network embeddings with spatial homophily to estimate social influence with unprecedented accuracy.</p>
<p>Social influence estimation is a cornerstone problem for platforms that rely on word-of-mouth dynamics. Identifying influential users underpins targeted advertising, viral marketing campaigns, and behavior prediction models. Prior work has long suggested that similarity between users is a significant driver of influence: people tend to trust, imitate, and adopt behaviors from those who resemble them. Traditional approaches measured that resemblance through structural metrics such as common neighbors, Jaccard coefficients, or path-based distances within the social graph. More recent methods turned to representation learning, embedding users into continuous vector spaces where proximity reflects similarity. Yet, as the authors point out, these techniques capture only limited facets of user characteristics, typically ignoring the rich geographic dimension that location-based social networks uniquely provide.</p>
<p>The study addresses this gap with two progressive contributions. The first, called NSH, short for Node Embedding and Spatial Homophily, is a hybrid, unsupervised method that linearly combines embedding-based structural similarity with spatial homophily, the well-documented tendency of geographically close users to be socially connected and behaviorally alike. NSH is deliberately simple and interpretable: it takes a user similarity score derived from network embeddings and blends it with a spatial homophily score computed from check-in co-location patterns. The result is a transparent similarity measure that serves as a strong baseline for analyzing the relationship between similarity and influence, and one that practitioners can compute without heavy machinery.</p>
<p>The second and central innovation is GeoSocial2Vec, an end-to-end unified embedding model designed to learn a single representation for each user by intrinsically merging social ties and spatial co-visitation patterns. Rather than computing two separate similarity scores and averaging them, GeoSocial2Vec constructs a heterogeneous graph in which users, social links, and locations coexist as nodes of different types. An adaptive random walk mechanism then traverses this combined graph, generating sequences of nodes that alternate between social hops and spatial transitions. These walks are fed into a skip-gram style embedding procedure, so that the resulting vectors encode both who a user knows and where a user goes within one coherent geometric space. The adaptive component weights different transition types dynamically, allowing the model to balance social and spatial evidence according to the structure of the data rather than a fixed heuristic.</p>
<p>This design reflects a broader shift in representation learning toward heterogeneous graph embeddings, where multiple node and edge types are embedded jointly instead of being projected into separate spaces. In the context of location-based social networks, the payoff is substantial. Two users who never interact directly but repeatedly visit the same neighborhoods at similar times will land close together in the GeoSocial2Vec embedding, capturing a latent affinity that pure network metrics would miss. Conversely, two friends who live in different cities and never share locations will still be pulled together by their social tie, something a purely geographic model would overlook. The embedding, in effect, learns the full socio-spatial signature of each user.</p>
<p>To test whether these richer similarity measures actually track influence, the researchers evaluated the relationship between user similarity and social influence through Pearson correlation and regression analysis on geographically filtered segments of three real-world location-based social networks: Gowalla, Brightkite, and Foursquare. These datasets, drawn from check-in services that were popular in the early 2010s, remain standard benchmarks in this field because they pair explicit friendship graphs with millions of timestamped location records. Filtering the data geographically ensured that the spatial component of the analysis was meaningful, focusing on regions dense enough for co-visitation patterns to be statistically robust.</p>
<p>The results were striking. Both proposed methods, in which spatial homophily is integrated with embedding-based similarity, produced a significantly stronger correlation with observed influence patterns than classical approaches that rely on structure alone. The GeoSocial2Vec framework achieved the highest accuracy across the benchmarks, demonstrating that intrinsically coupled socio-spatial learning outperforms post-hoc fusion of separate signals. In other words, it matters not just that social and geographic information are both considered, but that they are woven together during representation learning itself, allowing the model to capture interactions between the two dimensions that a linear combination cannot express.</p>
<p>At the same time, the authors are careful not to declare NSH obsolete. While GeoSocial2Vec offers the best predictive performance, the NSH framework retains clear advantages in interpretability and computational simplicity. Because NSH is a linear fusion of two comprehensible scores, an analyst can inspect exactly how much of a predicted influence relationship stems from network proximity versus geographic overlap. This transparency matters in business applications where stakeholders must justify targeting decisions, and in settings where training a deep heterogeneous embedding model is impractical due to limited compute or data volume. The two frameworks thus occupy complementary niches: GeoSocial2Vec as the accuracy-oriented state of the art, and NSH as a practical, explainable tool for everyday analysis.</p>
<p>The implications extend well beyond academic benchmarking. For advertisers on check-in-driven platforms, influence estimation that accounts for where people go, not just who they know, could sharpen the selection of seed users in viral campaigns, ensuring that promotional content spreads through communities that are both socially and geographically primed to receive it. For behavior prediction, the fused embeddings offer a way to anticipate adoption of products, venues, or even public health behaviors by modeling the twin channels of social contagion and spatial co-presence. Urban planners and mobility researchers may also find the technique useful, since the same embeddings encode movement regularities that correlate with social structure.</p>
<p>The study also contributes to a long-running scientific conversation about homophily, the principle that similar individuals connect and influence one another. Spatial homophily has been documented repeatedly in location-based social networks, where the probability of friendship decays with physical distance and shared places act as meeting grounds for ties. By demonstrating that this geographic dimension measurably strengthens the link between similarity and influence, the research quantifies how much predictive power has been left on the table by purely structural methods. It suggests that future influence models, and by extension the recommendation and marketing systems built on them, should treat location not as metadata but as a first-class signal in the learning process.</p>
<p>Technically, the work sits at the intersection of network embedding, heterogeneous graph learning, and random-walk-based representation methods. The adaptive random walk at the heart of GeoSocial2Vec echoes the logic of metapath-guided walks in heterogeneous graphs, but with a twist: transition probabilities are tuned to the data, letting the model decide how often to follow social edges versus spatial co-visit links. This adaptivity is what allows a single embedding space to serve both dimensions faithfully, and it is likely the key reason the framework outperformed the linear NSH fusion. The evaluation methodology, combining Pearson correlation with regression analysis across three independent platforms, adds confidence that the findings are not an artifact of one dataset&#8217;s quirks.</p>
<p>Limitations and open questions remain, as they do in any study of this kind. The benchmark datasets are aging, and modern platforms may exhibit different spatial dynamics, particularly as privacy changes and check-in behavior declines in some services. Influence itself is a latent quantity, inferred from observed diffusion patterns rather than measured directly, so all correlation results inherit the assumptions of the influence estimation pipeline. The authors also note that the published version is an early-access, peer-reviewed accepted manuscript carrying a permanent DOI, subject to final editorial edits. Still, the core message is robust: when it comes to understanding who moves whom in location-based social networks, knowing both the social graph and the map beats knowing either alone.</p>
<p>As location-aware platforms continue to blend commerce, mobility, and social connection, methods like GeoSocial2Vec point toward a future in which influence is predicted not from a single flattened network, but from the rich, coupled reality of how people relate and where they roam. The research received no specific grant from any funding agency in the public, commercial, or not-for-profit sectors, and the authors declare no competing interests.</p>
<p><strong>Subject of Research:</strong> Estimating social influence in location-based social networks using embedding-based similarity and spatial homophily</p>
<p><strong>Article Title:</strong> Investigating social influence using embedding-based similarity and spatial homophily on the location based social networks</p>
<p><strong>Article References:</strong> Akhavan-Hejazi, Z. S., Ghobaei-Arani, M., &amp; Sajjadi, Z. S. (2026). Investigating social influence using embedding-based similarity and spatial homophily on the location based social networks. <em>Journal of Big Data</em>. <a href="https://doi.org/10.1186/s40537-026-01546-x" rel="noopener noreferrer">https://doi.org/10.1186/s40537-026-01546-x</a></p>
<p><strong>Image Credits:</strong> AI Generated</p>
<p><strong>DOI:</strong> <a href="https://doi.org/10.1186/s40537-026-01546-x" rel="noopener noreferrer">10.1186/s40537-026-01546-x</a></p>
<p><strong>Keywords:</strong> social influence, location-based social networks, node embeddings, spatial homophily, GeoSocial2Vec, heterogeneous graph, random walk, Gowalla, Brightkite, Foursquare, representation learning, targeted advertising</p>
]]></content:encoded>
					
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">200620</post-id>	</item>
		<item>
		<title>Flat Gradients Make Fake Users Deadlier: Smarter Attacks Expose Recommender Vulnerabilities</title>
		<link>https://scienmag.com/flat-gradients-make-fake-users-deadlier-smarter-attacks-expose-recommender-vulnerabilities/</link>
		
		<dc:creator><![CDATA[Denise Maddox]]></dc:creator>
		<pubDate>Sat, 12 Sep 2026 13:03:31 +0000</pubDate>
				<category><![CDATA[Technology and Engineering]]></category>
		<category><![CDATA[adversarial attack efficiency]]></category>
		<category><![CDATA[adversarial examples]]></category>
		<category><![CDATA[adversarial fake users]]></category>
		<category><![CDATA[black box attack on recommendation models]]></category>
		<category><![CDATA[black-box attack]]></category>
		<category><![CDATA[collaborative filtering]]></category>
		<category><![CDATA[data poisoning]]></category>
		<category><![CDATA[digital life influence by recommendation engines]]></category>
		<category><![CDATA[fake user attack success rate]]></category>
		<category><![CDATA[Gowalla]]></category>
		<category><![CDATA[gradient penalty]]></category>
		<category><![CDATA[gradient penalty in recommender systems]]></category>
		<category><![CDATA[loss landscape]]></category>
		<category><![CDATA[machine learning security]]></category>
		<category><![CDATA[MovieLens]]></category>
		<category><![CDATA[RecGP technique]]></category>
		<category><![CDATA[recommendation model deception]]></category>
		<category><![CDATA[Recommendation system vulnerabilities]]></category>
		<category><![CDATA[recommendation systems]]></category>
		<category><![CDATA[recommender system security risks]]></category>
		<category><![CDATA[resource-efficient attack methods]]></category>
		<category><![CDATA[shilling attacks]]></category>
		<category><![CDATA[transfer-based adversarial attacks]]></category>
		<category><![CDATA[transferability]]></category>
		<guid isPermaLink="false">https://scienmag.com/?p=194655</guid>

					<description><![CDATA[Researchers have developed RecGP, a gradient penalty method that crafts transferable adversarial fake users by steering them toward flat regions of the loss landscape, boosting attack success rates against unknown recommendation systems.]]></description>
										<content:encoded><![CDATA[<p>Recommendation systems quietly shape much of modern digital life, deciding which films appear on a streaming homepage, which restaurants surface in a navigation app, and which products rise to the top of an online marketplace. Their power rests on a simple assumption: that the behavioral traces users leave behind—ratings, purchases, check-ins—faithfully reflect genuine preferences. A new study published in Data Mining and Knowledge Discovery demonstrates just how fragile that assumption can be. Researchers led by Caihong Wu and Hai Chen have developed a technique called RecGP, short for Recommendation-specific Gradient Penalty, which crafts adversarial fake users that can deceive recommendation models they were never designed to attack. The work, published in the journal&#8217;s September 2026 issue, reports attack success rate improvements of roughly eight percent over existing methods on the Gowalla dataset across eight different target models, while a resource-efficient variant maintains 98 percent of that attack power while cutting GPU memory consumption by 42 percent.</p>
<p>The technique belongs to a family of attacks known as transfer-based adversarial attacks. In such attacks, an adversary cannot peer inside the target recommendation system, which operates as a black box guarded by commercial secrecy. Instead, the attacker builds a surrogate model that mimics the target&#8217;s behavior, trains the surrogate on publicly available data, and then injects carefully constructed fake user profiles designed to manipulate the surrogate&#8217;s recommendations. The hope is that these poisoned profiles will transfer: that when injected into the real, unknown target system, they will produce the same distortion, promoting a chosen item or burying a competitor. This scenario, often called a shilling attack, has been studied since the early days of collaborative filtering, but deep learning has dramatically raised the stakes, because modern neural recommenders are both more powerful and, in some respects, more susceptible to carefully aimed perturbations.</p>
<p>The core insight behind RecGP comes from an unexpected corner of deep learning theory: the geometry of the loss landscape. When an adversarial example is optimized on a surrogate model, it typically settles into a region where the loss surface is sharp—a narrow spike surrounded by steep gradients. Such solutions perform superbly on the surrogate but generalize poorly, because they are exquisitely sensitive to small changes in model parameters. Two recommendation systems, even trained on the same data, will have slightly different internal weights, and an adversarial example perched on a sharp peak will lose its effectiveness under that variation. Flat regions of the loss landscape, by contrast, exhibit small gradients and gentle slopes, meaning the adversarial example&#8217;s effect is stable even when parameters shift between the surrogate and the unknown target. The same flatness principle underlies sharpness-aware minimization, a technique developed to improve model generalization in entirely benign contexts, and the authors adapt it here for offensive purposes.</p>
<p>RecGP operationalizes this insight by adding a gradient penalty to the optimization process that generates fake users. As the attacker searches for adversarial perturbations, the penalty regularizes the magnitude of the gradients, steering the search away from sharp peaks and toward flat basins of the loss surface. In effect, the method asks not merely, &#8216;Which fake user fools this surrogate most effectively?&#8217; but rather, &#8216;Which fake user fools this surrogate in a way that is robust to the inevitable differences between models?&#8217; The authors frame this as a recommendation-specific reformulation, because recommendation data differs fundamentally from the continuous image data where flatness-aware attacks were first explored. A fake user profile in a recommender is not a subtly shifted photograph; it is a discrete collection of interactions, and the attack must respect the semantic structure of that discrete space.</p>
<p>That discrete structure creates a computational challenge, which the team addressed with a second contribution: RecGP-RS, or Recommender Systems Gradient Penalty with Resource-efficient Sampling. Computing true second-order gradient information—needed to assess the flatness of the landscape—is expensive, particularly over the large interaction spaces typical of real-world recommender systems. RecGP-RS sidesteps the cost through semantic-aware neighborhood sampling, which selects representative neighbors of each perturbation in the discrete interaction space while preserving semantic consistency, ensuring that sampled neighbors correspond to plausible user behaviors rather than arbitrary noise. Around these sampled neighbors, the method approximates second-order gradients using first-order interpolation, capturing the essential curvature information at a fraction of the computational price. The result, according to the paper, is a variant that retains 98 percent of the attack efficacy of the full method while reducing GPU memory consumption by 42 percent—a substantial saving that matters when attacks must be staged against large-scale production-like systems.</p>
<p>The empirical evaluation spanned two widely used benchmark datasets: MovieLens-1M, a canonical collection of roughly one million movie ratings maintained by the GroupLens research group, and Gowalla, a location-based social network dataset distributed through the Stanford Network Analysis Project. Across eight target recommendation models, RecGP achieved an average attack success rate improvement of approximately eight percent over existing baseline attack methods on the Gowalla dataset. The target models examined in the broader literature on which this work builds include the standard architectures of the field: neural collaborative filtering, Bayesian personalized ranking, collaborative denoising autoencoders, and matrix factorization approaches, among others. The breadth of improvement across diverse architectures is the transferability claim&#8217;s real substance—an attack that only worked against one model family would be of limited concern, but a method that reliably degrades many different recommenders suggests a structural weakness in how these systems learn from behavioral data.</p>
<p>The practical implications are sobering. Recommendation systems are not merely convenience features; they are revenue engines. A seller who can promote products through injected fake users can distort marketplace competition, and a malicious actor who can suppress content can shape public opinion. Earlier generations of shilling attacks required large volumes of hand-crafted fake profiles and were relatively easy to detect because they followed stereotyped patterns. Learning-based attacks such as the one developed here generate profiles optimized by gradient descent, which can be subtler and harder to flag. The flatness technique makes them more portable across the heterogeneous collection of models that platforms actually deploy, meaning a profile set crafted once could plausibly threaten several services rather than one. The study also notes that RecGP builds on earlier transferability work by the same group, including methods based on Nesterov momentum and multi-model integration and fine-tuning, indicating a sustained research trajectory into how adversarial examples move between recommender architectures.</p>
<p>From a defensive standpoint, the research is valuable precisely because it illuminates the mechanism of failure. If sharp loss regions are what make adversarial examples brittle and flat regions what make them dangerous, then defenders have a concrete signal to target. Detection systems could look for interactions that sit suspiciously in flat regions of the platform&#8217;s own loss surface, or training procedures could incorporate flatness-aware objectives that make recommendation models inherently less sensitive to small numbers of poisoned profiles. The work also joins a broader conversation about loss landscape geometry in machine learning security, echoing findings from computer vision where flat local maxima have been linked to improved adversarial transferability, and from theoretical studies of the embedding principle of loss landscapes in deep neural networks. The transferability problem, once considered a vision-specific curiosity, now demonstrably spans the recommender domain.</p>
<p>The research team, based at Anhui University&#8217;s Key Laboratory of Intelligent Computing and Signal Processing and its Artificial Intelligence Institute, with a collaborator at Tsinghua University, was supported by the National Natural Science Foundation of China and provincial research programs, and used Anhui University&#8217;s high-performance computing platform. Caihong Wu and Hai Chen contributed equally to the work, with Fulan Qian serving as corresponding author. As recommendation systems grow more embedded in commerce, media, and information ecosystems, studies of this kind serve a dual purpose: they hand attackers a sharper tool, but they also hand defenders a clearer map of where the walls are thin. The eight percent gain in attack success reported on Gowalla is not merely a benchmark increment; it is a quantified measure of how much behavioral data alone can be trusted, and a reminder that robustness against adversarial manipulation must be designed into recommendation systems from the ground up rather than bolted on after the fact.</p>
<p><strong>Subject of Research:</strong> Gradient-penalized transferable adversarial attacks on recommendation systems</p>
<p><strong>Article Title:</strong> Recgp: gradient penalization for transferable adversarial attacks in recommendation systems</p>
<p><strong>Article References:</strong> Wu, C., Chen, H., Song, S., Yan, Y., Zhao, S., &amp; Qian, F. (2026). Recgp: gradient penalization for transferable adversarial attacks in recommendation systems. <em>Data Mining and Knowledge Discovery, 40</em>(5), Article 88. <a href="https://doi.org/10.1007/s10618-026-01253-4" rel="noopener noreferrer">https://doi.org/10.1007/s10618-026-01253-4</a></p>
<p><strong>Image Credits:</strong> AI Generated</p>
<p><strong>DOI:</strong> <a href="https://doi.org/10.1007/s10618-026-01253-4" rel="noopener noreferrer">10.1007/s10618-026-01253-4</a></p>
<p><strong>Keywords:</strong> recommendation systems, adversarial examples, gradient penalty, loss landscape, transferability, shilling attacks, collaborative filtering, data poisoning, black-box attack, MovieLens, Gowalla, machine learning security</p>
]]></content:encoded>
					
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">194655</post-id>	</item>
	</channel>
</rss>
