Abstract:Although federated learning improves privacy of training data by exchanging local gradients or parameters rather than raw data, the adversary still can leverage local gradients and parameters to obtain local training data by launching reconstruction and membership inference attacks. To defend against such privacy attacks, many noises perturbed methods (like differential privacy or CountSketch matrix) have been widely designed. However, the strong defence ability and high learning accuracy of these schemes cannot be ensured at the same time, which will impede the wide application of FL in practice (especially for medical or financial institutions that require both high accuracy and strong privacy guarantee). To overcome this issue, we propose an efficient model perturbation method for federated learning to defend against reconstruction and membership inference attacks launched by curious clients. On the one hand, similar to the differential privacy, our method also selects random numbers as perturbed noises added to the global model parameters, and thus it is very efficient and easy to be integrated in practice. Meanwhile, the random selected noises are positive real numbers and the corresponding value can be arbitrarily large, and thus the strong defence ability can be ensured. On the other hand, unlike differential privacy or other perturbation methods that cannot eliminate added noises, our method allows the server to recover the true aggregated gradients by eliminating the added noises. Therefore, our method does not hinder learning accuracy at all. Extensive experiments demonstrate that for both regression and classification tasks, our method achieves the same accuracy as non-private approaches and outperforms the state-of-the-art defence schemes. Besides, the defence ability of our method against reconstruction and membership inference attack is significantly better than the state-of-the-art related defence schemes.

Privacy-preserving federated mobility prediction with compound data and model perturbation mechanism

Federated Representation Learning with Data Heterogeneity for Human Mobility Prediction

PMF: A Privacy-preserving Human Mobility Prediction Framework via Federated Learning

Hierarchical Federated Learning: the Interplay of User Mobility and Data Heterogeneity

A federated pedestrian trajectory prediction model with data privacy protection

PVFL: Verifiable Federated Learning and Prediction with Privacy-Preserving

Privacy-Aware Adversarial Network in Human Mobility Prediction

Privacy-Aware Human Mobility Prediction via Adversarial Networks

Performance-Enhanced Federated Learning with Differential Privacy for Internet of Things

FedVoting: A Cross-Silo Boosting Tree Construction Method for Privacy-Preserving Long-Term Human Mobility Prediction

FLPP: A Federated-Learning-Based Scheme for Privacy Protection in Mobile Edge Computing

Decentralized Attention-based Personalized Human Mobility Prediction

An Accuracy-Lossless Perturbation Method for Defending Privacy Attacks in Federated Learning

Data-Heterogeneous Hierarchical Federated Learning with Mobility

FedRec: Privacy-Preserving News Recommendation with Federated Learning

PrivFL: Practical Privacy-preserving Federated Regressions on High-dimensional Data over Mobile Networks

PateGail: A Privacy-Preserving Mobility Trajectory Generator with Imitation Learning

Federated learning‐based trajectory prediction model with privacy preserving for intelligent vehicle

Privacy preserving distributed machine learning with federated learning

Human Mobility Prediction Using Sparse Trajectory Data.

Novel trajectory privacy protection method against prediction attacks