Abstract:In the mobile Internet era, recommender systems have become an irreplaceable tool to help users discover useful items, thus alleviating the information overload problem. Recent research on deep neural network (DNN)-based recommender systems have made significant progress in improving prediction accuracy, largely attributed to the widely accessible large-scale user data. Such data is commonly collected from users' personal devices and then centrally stored in the cloud server to facilitate model training. However, with the rising public concerns on user privacy leakage in online platforms, online users are becoming increasingly anxious over abuses of user privacy. Therefore, it is urgent and beneficial to develop a recommender system that can achieve both high prediction accuracy and strong privacy protection. To this end, we propose a DNN-based recommendation model called PrivRec running on the decentralized federated learning (FL) environment, which ensures that a user's data is fully retained on her/his personal device while contributing to training an accurate model. On the other hand, to better embrace the data heterogeneity (e.g., users' data vary in scale and quality significantly) in FL, we innovatively introduce a first-order meta-learning method that enables fast on-device personalization with only a few data points. Furthermore, to defend against potential malicious participants that pose serious security threat to other users, we further develop a user-level differentially private model, namely DP-PrivRec, so attackers are unable to identify any arbitrary user from the trained model. To compensate for the loss by adding noise during model updates, we introduce a two-stage training approach. Finally, we conduct extensive experiments on two large-scale datasets in a simulated FL environment, and the results validate the superiority of both PrivRec and DP-PrivRec.

A Smart Privacy-Preserving Learning Method by Fake Gradients to Protect Users Items in Recommender Systems

PrivMVMF: Privacy-Preserving Multi-View Matrix Factorization for Recommender Systems

Matrix factorization recommender based on adaptive Gaussian differential privacy for implicit feedback

How to Profile Privacy-Conscious Users in Recommender Systems

Efficient Federated Matrix Factorization Against Inference Attacks

Hiding Your Awful Online Choices Made More Efficient and Secure: A New Privacy-Aware Recommender System

Covering the Sensitive Subjects to Protect Personal Privacy in Personalized Recommendation.

When Differential Privacy Meets Randomized Perturbation: A Hybrid Approach For Privacy-Preserving Recommender System

Privacy-aware Location Privacy Preference Recommendations

Fast-adapting and privacy-preserving federated recommender system

A differentially private matrix factorization based on vector perturbation for recommender system

On the resilience of Collaborative Learning-based Recommender Systems Against Community Detection Attack

A privacy preserving recommendation and fraud detection method based on graph convolution

Data Poisoning Attacks to Deep Learning Based Recommender Systems

A Scalable Algorithm for Privacy-Preserving Item-based Top-N Recommendation

A Privacy Preserving System for Movie Recommendations Using Federated Learning

Private and Utility Enhanced Recommendations with Local Differential Privacy and Gaussian Mixture Model

A differentially private nonnegative matrix factorization for recommender system

An Algorithm for Efficient Privacy-Preserving Item-Based Collaborative Filtering

Deep-Reinforcement-Learning-Based User Profile Perturbation for Privacy-Aware Recommendation

DPLCF: Differentially Private Local Collaborative Filtering