Abstract:When user-centric location privacy protections are used by the public (e.g., published as a mobile application to Mac app store), they are found to be vulnerable to a novel kind of potential inference attacks. These attacks can utilize the open-use protection’s input–output pairs to closely study the protection’s structure and mechanism. We name this kind of attacks as knowing-and-learning (KL) attacks. Targeted at such potential but threatening deep learning-based KL attacks in local search services, we propose a novel location privacy protection framework LPP2KL. LPP2KL aims to generate an obfuscated location, which is robust to the aforementioned attacks, so that the user’s current location (real) can be replaced by the generated location (pseudo) when submitted to the untrusted search server. To achieve this, we first depict a feasible net structure to implement the deep KL attack and verify its power with extensive experiments. Second, to simulate the attack-and-defense process, we develop a novel network structure with an adversary net and a protection net. These nets play a mini–max game toward privacy inference in an adversarial manner until an equilibrium is reached. Meanwhile, the protection net also achieves the balance between preserved privacy and quality of service through utility-constrained privacy optimization. We introduce a novel penalty function to handle the utility-constrained privacy optimization problem. Extensive experiments are conducted on Yelp and FoursSwarm datasets, which validate the generality of our proposed LPP2KL in protection handling and illustrate its effectiveness in utility control under the acceptable quality of service.

I Know Where You All Are! Exploiting Mobile Social Apps for Large-Scale Location Privacy Probing.

Exploiting Proximity-Based Mobile Apps for Large-Scale Location Privacy Probing

All Your Location Are Belong to Us: Breaking Mobile Social Networks for Automated User Location Tracking.

Privacy Leakage of Location Sharing in Mobile Social Networks: Attacks and Defense

SALS: semantics-aware location sharing based on cloaking zone in mobile social networks.

X-Region: A Framework for Location Privacy Preservation in Mobile Peer-to-peer Networks

You Are Where You App: an Assessment on Location Privacy of Social Applications.

Preventing Location-based Inference Attack in Location Based Services

Location Privacy Protection Method on Mobile Social Mode

Smartphone Privacy Leakage of Social Relationships and Demographics from Surrounding Access Points.

Efficient and Privacy-Preserving Proximity Detection Schemes for Social Applications

Data Security Risk of LBS Application

Location Cheating: A Security Challenge to Location-based Social Network Services

Privacy Risks in Mobile Dating Apps

PPLS: a Privacy-Preserving Location-Sharing Scheme in Mobile Online Social Networks

A Novel Location Privacy Protection Algorithm for Social Discovery Application

Privacy-Aware Information Sharing in Location-Based Services: Attacks and Defense.

Identifying Cross-User Privacy Leakage in Mobile Mini-Apps at a Large Scale

LPP2KL: Online Location Privacy Protection Against Knowing-and-Learning Attacks for LBSs

ARSpy: Breaking Location-Based Multi-Player Augmented Reality Application for User Location Tracking

Location Privacy with Randomness Consistency.