Classification features for attack detection in collaborative recommender systems