Skip to content
Search
paperMarch 2026Unreviewed

RoLLMRec: a robust LLM-based recommender system for defending against shilling and prompt injection attacks

Sarama Shehmir, Rasha Kashef

Frontiers in Computer Science

Abstract

Large Language Models (LLMs) are increasingly being integrated into recommender systems, offering contextual reasoning, cross-domain adaptability, and natural language interaction. However, their adoption also introduces vulnerabilities such as prompt injection, semantic poisoning, and shilling attacks, which can distort recommendations and erode user trust. Addressing these risks is essential for the safe deployment of LLM-based recommenders. We propose RoLLMRec, a defense oriented architectura

Categories

Framework mappings

OWASP Top 10 for LLM Applications
  • LLM01Prompt Injection
  • LLM04Data and Model Poisoning
MITRE ATLAS
  • AML.T0020Poison Training Data
  • AML.T0051LLM Prompt Injection

Suggested from the entry's categories.

Cite

@article{shehmir2026rollmrec,
  title = {{RoLLMRec: a robust LLM-based recommender system for defending against shilling and prompt injection attacks}},
  author = {Sarama Shehmir and Rasha Kashef},
  year = {2026},
  month = mar,
  journal = {Frontiers in Computer Science},
  doi = {10.3389/fcomp.2026.1735253},
  url = {https://doi.org/10.3389/fcomp.2026.1735253}
}