Detecting Shilling Attacks with Automatic Features from Multiple Views

Figure 4

Precision of eight methods with six types of attacks at various filler sizes across various attack sizes on the Netflix dataset.

(a) 3% filler size

(b) 5% filler size