Fig. 25.11: Prediction shift vs attack size for an average attack at 5% filler for
segment recommendation (left). MAE on the attacked item vs attack size for filler
size of 10% using RMF (right).
reference is the MAE on the kNN algorithm and standard SVD, with and without
attack.