Abstract:Collecting and training over sensitive personal data raise severe privacy concerns in personalized recommendation systems, and federated learning can potentially alleviate the problem by training models over decentralized user <a class="link-external link-http" href="http://data.However" rel="external noopener nofollow">this http URL</a>, a theoretically private solution in both the training and serving stages of federated recommendation is essential but still <a class="link-external link-http" href="http://lacking.Furthermore" rel="external noopener nofollow">this http URL</a>, naively applying differential privacy (DP) to the two stages in federated recommendation would fail to achieve a satisfactory trade-off between privacy and utility due to the high-dimensional characteristics of model gradients and hidden <a class="link-external link-http" href="http://representations.In" rel="external noopener nofollow">this http URL</a> this work, we propose a federated news recommendation method for achieving a better utility in model training and online serving under a DP <a class="link-external link-http" href="http://guarantee.We" rel="external noopener nofollow">this http URL</a> first clarify the DP definition over behavior data for each round in the life-circle of federated recommendation <a class="link-external link-http" href="http://systems.Next" rel="external noopener nofollow">this http URL</a>, we propose a privacy-preserving online serving mechanism under this definition based on the idea of decomposing user embeddings with public basic vectors and perturbing the lower-dimensional combination coefficients. We apply a random behavior padding mechanism to reduce the required noise intensity for better utility. Besides, we design a federated recommendation model training method, which can generate effective and public basic vectors for serving while providing DP for training participants. We avoid the dimension-dependent noise for large models via label permutation and differentially private attention modules. Experiments on real-world news recommendation datasets validate that our method achieves superior utility under a DP guarantee in both training and serving of federated news recommendations.

UA-FedRec: Untargeted Attack on Federated News Recommendation

FedRecAttack: Model Poisoning Attack to Federated Recommendation

Poisoning Deep Learning Based Recommender Model in Federated Learning Scenarios.

Efficient-FedRec: Efficient Federated Learning Framework for Privacy-Preserving News Recommendation

Preventing the Popular Item Embedding Based Attack in Federated Recommendations

FedRec: Privacy-Preserving News Recommendation with Federated Learning

Untargeted Attack Against Federated Recommendation Systems Via Poisonous Item Embeddings and the Defense.

Uni-FedRec: A Unified Privacy-Preserving News Recommendation Framework for Model Training and Online Serving

User Consented Federated Recommender System Against Personalized Attribute Inference Attack

Federated Unlearning for On-Device Recommendation

Robust Federated Recommendation System

FedAttack: Effective and Covert Poisoning Attack on Federated Recommendation via Hard Sampling

Manipulating Federated Recommender Systems: Poisoning with Synthetic Users and Its Countermeasures

Randomization is all you need: A privacy-preserving federated learning framework for news recommendation

FedRec++: Lossless Federated Recommendation with Explicit Feedback

DV-FSR: A Dual-View Target Attack Framework for Federated Sequential Recommendation

Interaction-level Membership Inference Attack Against Federated Recommender Systems

Comprehensive Privacy Analysis on Federated Recommender System against Attribute Inference Attacks

PrivateRec: Differentially Private Training and Serving for Federated News Recommendation

Efficient and Robust Regularized Federated Recommendation

FedDeepFM: A Factorization Machine-Based Neural Network for Recommendation in Federated Learning