Kaike Zhang
Current Organizations / Institutes
The organizations/institutes from the scholar's latest article
Kaike Zhang has a total of 27 co-authors. Here are the top co-authors by number of shared publications:
- Qi Cao
State Key Laboratory of AI Safety, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China
14 shared publications - Huawei Shen
State Key Lab of AI Safety, Institute of Computing Technology, CAS, Beijing, China
13 shared publications - Fei Sun
State Key Laboratory of AI Safety, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China
11 shared publications - Xueqi Cheng
Chinese Academy of Sciences University of Chinese Academy of Sciences Beijing China
9 shared publications - Yunfan Wu
CAS Key Laboratory of AI Safety, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China and University of Chinese Academy of Sciences, Beijing, China
8 shared publications - Du Su
Institute of Computing Technology, CAS, Beijing, China
4 shared publications
Latest Publications
- Open Access
- 6 November 2026
- Published by Association for Computing Machinery (ACM)
- p. 5281-5292
From Interactions to Embeddings: A New Perspective for Poisoning Recommender Systems
- 6 November 2026
- Published by Association for Computing Machinery (ACM)
- p. 5281-5292
Open AccessFrom Interactions to Embeddings: A New Perspective for Poisoning Recommender Systems
- Open Access
- 19 July 2026
- Published by Association for Computing Machinery (ACM)
- p. 2297-2307
AsarRec: Adaptive Sequential Augmentation for Robust Self-supervised Sequential Recommendation
Real-world user behaviors are often noisy due to factors such as human errors, uncertainty, and behavioral ambiguity, which can lead to degraded recommendation performance. To address this issue, recent approaches widely adopt self-supervised learning (SSL), particularly contrastive learning, by generating perturbed views of user interaction sequences and maximizing their mutual information to improve model robustness. However, these methods heavily rely on their pre-defined static augmentation strategies~(where the augmentation type remains fixed once chosen) to construct augmented views, leading to two critical challenges: (1) the optimal augmentation type can vary significantly across different scenarios; (2) inappropriate augmentations may even degrade recommendation performance, limiting the effectiveness of SSL. To overcome these limitations, we propose an adaptive augmentation framework. We first unify existing basic augmentation operations into a unified formulation via structured transformation matrices. Building on this formulation, we introduce AsarRec, an Adaptive Sequential Augmentation for Robust Sequential Recommendation. To enable stable end-to-end optimization of discrete and strongly constrained augmentations, AsarRec learns to generate transformation matrices by encoding user sequences into probabilistic transition matrices and projecting them into hard semi-doubly stochastic matrices via a differentiable Semi-Sinkhorn algorithm. To ensure that the learned augmentations benefit downstream performance, we jointly optimize three objectives: diversity (encouraging distinct views), semantic invariance (preserving semantic consistency among views), and informativeness (identifying augmentations most beneficial to recommendation). Extensive experiments on four benchmarks under varying noise levels validate the effectiveness of AsarRec, demonstrating its superior robustness and consistent improvements.
- 19 July 2026
- Published by Association for Computing Machinery (ACM)
- p. 2297-2307
Open AccessAsarRec: Adaptive Sequential Augmentation for Robust Self-supervised Sequential Recommendation
Real-world user behaviors are often noisy due to factors such as human errors, uncertainty, and behavioral ambiguity, which can lead to degraded recommendation performance. To address this issue, recent approaches widely adopt self-supervised learning (SSL), particularly contrastive learning, by generating perturbed views of user interaction sequences and maximizing their mutual information to improve model robustness. However, these methods heavily rely on their pre-defined static augmentation strategies~(where the augmentation type remains fixed once chosen) to construct augmented views, leading to two critical challenges: (1) the optimal augmentation type can vary significantly across different scenarios; (2) inappropriate augmentations may even degrade recommendation performance, limiting the effectiveness of SSL. To overcome these limitations, we propose an adaptive augmentation framework. We first unify existing basic augmentation operations into a unified formulation via structured transformation matrices. Building on this formulation, we introduce AsarRec, an Adaptive Sequential Augmentation for Robust Sequential Recommendation. To enable stable end-to-end optimization of discrete and strongly constrained augmentations, AsarRec learns to generate transformation matrices by encoding user sequences into probabilistic transition matrices and projecting them into hard semi-doubly stochastic matrices via a differentiable Semi-Sinkhorn algorithm. To ensure that the learned augmentations benefit downstream performance, we jointly optimize three objectives: diversity (encouraging distinct views), semantic invariance (preserving semantic consistency among views), and informativeness (identifying augmentations most beneficial to recommendation). Extensive experiments on four benchmarks under varying noise levels validate the effectiveness of AsarRec, demonstrating its superior robustness and consistent improvements.
- Open Access
- 28 May 2026
- Published by Association for Computing Machinery (ACM)
- p. 636-639
The 2nd Workshop on Human-Centered Recommender Systems
- 28 May 2026
- Published by Association for Computing Machinery (ACM)
- p. 636-639
Open AccessThe 2nd Workshop on Human-Centered Recommender Systems
- 10 January 2026
- Published by Elsevier in Neural Networks
- Vol. 198, 108573
The answer lies within: Detecting Trojans from DNNs’ inherent characteristics
- 10 January 2026
- Published by Elsevier in Neural Networks
- Vol. 198, 108573
The answer lies within: Detecting Trojans from DNNs’ inherent characteristics
- Open Access
- 6 December 2025
- Published by Association for Computing Machinery (ACM)
- p. 75-84
Data Usage Privacy Auditing for Semi-supervised GNNs
- 6 December 2025
- Published by Association for Computing Machinery (ACM)
- p. 75-84
Open AccessData Usage Privacy Auditing for Semi-supervised GNNs
- Open Access
- 6 December 2025
- Published by Association for Computing Machinery (ACM)
- p. 251-260
LLM4MEA: Data-free Model Extraction Attacks on Sequential Recommenders via Large Language Models
- 6 December 2025
- Published by Association for Computing Machinery (ACM)
- p. 251-260
Open AccessLLM4MEA: Data-free Model Extraction Attacks on Sequential Recommenders via Large Language Models
- Open Access
- 16 October 2025
- Published by Association for Computing Machinery (ACM) in Proceedings of the ACM on Human-Computer Interaction
- Vol. 9 (7) , 1-38
'I Know You Are Discriminatory!': Automated Substantiating for Individual Fairness Auditing of AI Systems
Artificial intelligence (AI) systems are playing an increasingly crucial role in people's lives, and their frequent unfair behaviors raise concerns about fairness. To unveil the unfairness in AI systems, researchers conduct fairness auditing on these systems. However, existing fairness auditing works often focus on group fairness while ignoring discriminatory phenomena among individuals. To unearth discriminatory phenomena against individuals within AI systems, this paper proposes an individual fairness auditing framework, termed ''substantiating'', which can identify discrimination instances within AI systems by constructing individual samples. To construct these samples for substantiating, auditors often have to rely on subjective prior knowledge, lacking guidelines on how to construct unfair samples. To address this issue, this paper introduces two categories of automated sample generation methods that can rapidly find unfair samples within a limited number of queries to the system and demonstrate their effectiveness through experiments. This paper evaluates the proposed auditing framework among three categories of stakeholders in AI fairness: auditors, AI model developers, and non-technical personnel. The research findings point out their demand for individual fairness audits of AI systems and highlight how the framework supports a reliable and convenient individual fairness audit.
- 16 October 2025
- Published by Association for Computing Machinery (ACM) in Proceedings of the ACM on Human-Computer Interaction
- Vol. 9 (7) , 1-38
Open Access'I Know You Are Discriminatory!': Automated Substantiating for Individual Fairness Auditing of AI Systems
Artificial intelligence (AI) systems are playing an increasingly crucial role in people's lives, and their frequent unfair behaviors raise concerns about fairness. To unveil the unfairness in AI systems, researchers conduct fairness auditing on these systems. However, existing fairness auditing works often focus on group fairness while ignoring discriminatory phenomena among individuals. To unearth discriminatory phenomena against individuals within AI systems, this paper proposes an individual fairness auditing framework, termed ''substantiating'', which can identify discrimination instances within AI systems by constructing individual samples. To construct these samples for substantiating, auditors often have to rely on subjective prior knowledge, lacking guidelines on how to construct unfair samples. To address this issue, this paper introduces two categories of automated sample generation methods that can rapidly find unfair samples within a limited number of queries to the system and demonstrate their effectiveness through experiments. This paper evaluates the proposed auditing framework among three categories of stakeholders in AI fairness: auditors, AI model developers, and non-technical personnel. The research findings point out their demand for individual fairness audits of AI systems and highlight how the framework supports a reliable and convenient individual fairness audit.
- Top Cited PapersOpen Access
- 1 September 2025
- Published by Association for Computing Machinery (ACM) in ACM Computing Surveys
- Vol. 58 (1) , 1-38
Robust Recommender System: A Survey and Future Directions
With the rapid growth of information, recommender systems have become integral for providing personalized suggestions and overcoming information overload. However, their practical deployment often encounters “dirty” data, where noise or malicious information can lead to abnormal recommendations. Research on improving robustness of recommender systems against such dirty data has thus gained significant attention. This survey provides a comprehensive review of recent work on robust recommender systems. We first present a taxonomy to organize current techniques for withstanding malicious attacks and natural noise. We then explore state-of-the-art methods in each category, including fraudster detection, adversarial training, certifiable robust training for defending against malicious attacks, and regularization, purification, self-supervised learning for defending against malicious attacks. Additionally, we summarize evaluation metrics and commonly used datasets for assessing robustness. We discuss robustness across varying recommendation scenarios and its interplay with other properties like accuracy, interpretability, privacy, and fairness. Finally, we delve into open issues and future research directions in this emerging field. Our goal is to provide readers with a comprehensive understanding of robust recommender systems and to identify key pathways for future research and development. To facilitate ongoing exploration, we maintain a continuously updated GitHub repository with related research: https://github.com/Kaike-Zhang/Robust-Recommender-System .
- 1 September 2025
- Published by Association for Computing Machinery (ACM) in ACM Computing Surveys
- Vol. 58 (1) , 1-38
Top Cited PapersOpen AccessRobust Recommender System: A Survey and Future Directions
With the rapid growth of information, recommender systems have become integral for providing personalized suggestions and overcoming information overload. However, their practical deployment often encounters “dirty” data, where noise or malicious information can lead to abnormal recommendations. Research on improving robustness of recommender systems against such dirty data has thus gained significant attention. This survey provides a comprehensive review of recent work on robust recommender systems. We first present a taxonomy to organize current techniques for withstanding malicious attacks and natural noise. We then explore state-of-the-art methods in each category, including fraudster detection, adversarial training, certifiable robust training for defending against malicious attacks, and regularization, purification, self-supervised learning for defending against malicious attacks. Additionally, we summarize evaluation metrics and commonly used datasets for assessing robustness. We discuss robustness across varying recommendation scenarios and its interplay with other properties like accuracy, interpretability, privacy, and fairness. Finally, we delve into open issues and future research directions in this emerging field. Our goal is to provide readers with a comprehensive understanding of robust recommender systems and to identify key pathways for future research and development. To facilitate ongoing exploration, we maintain a continuously updated GitHub repository with related research: https://github.com/Kaike-Zhang/Robust-Recommender-System .
- Open Access
- 8 May 2025
- Published by Association for Computing Machinery (ACM)
- p. 2088-2091
The 1st Workshop on Human-Centered Recommender Systems
- 8 May 2025
- Published by Association for Computing Machinery (ACM)
- p. 2088-2091
Open AccessThe 1st Workshop on Human-Centered Recommender Systems
- Open Access
- 22 April 2025
- Published by Association for Computing Machinery (ACM)
- p. 4470-4481
Personalized Denoising Implicit Feedback for Robust Recommender System
- 22 April 2025
- Published by Association for Computing Machinery (ACM)
- p. 4470-4481
Open AccessPersonalized Denoising Implicit Feedback for Robust Recommender System