We select three simulation types from Profile Injection Attack (Williams and Mobasher, 2006), i.e., random, average, and love/hate.
our model performs better than baselines in aggregating noisy labels, especially when the noise scale becomes large.