AIセキュリティポータル K Program
Privacy-Preserving Matrix Factorization for Recommendation Systems using Gaussian Mechanism
Share
Abstract
Building a recommendation system involves analyzing user data, which can potentially leak sensitive information about users. Anonymizing user data is often not sufficient for preserving user privacy. Motivated by this, we propose a privacy-preserving recommendation system based on the differential privacy framework and matrix factorization, which is one of the most popular algorithms for recommendation systems. As differential privacy is a powerful and robust mathematical framework for designing privacy-preserving machine learning algorithms, it is possible to prevent adversaries from extracting sensitive user information even if the adversary possesses their publicly available (auxiliary) information. We implement differential privacy via the Gaussian mechanism in the form of output perturbation and release user profiles that satisfy privacy definitions. We employ R\'enyi Differential Privacy for a tight characterization of the overall privacy loss. We perform extensive experiments on real data to demonstrate that our proposed algorithm can offer excellent utility for some parameter choices, while guaranteeing strict privacy.
A survey of collaborative filtering techniques
X. Su, T. M. Khoshgoftaar
Published: 2009
Matrix factorization techniques for recommender systems
Yehuda Koren, Robert Bell, Chris Volinsky
Published: 2009
The Netflix prize
J. Bennett, S. Lanning
Published: 2007
Alamobic: a privacy-preserving recommender system for electronic commerce
E. A¨ımeur, G. Brassard, J. M. Fernandez, F. S. Mani Onana
Published: 2008
” you might also like:” privacy risks of collaborative filtering
J. A. Calandrino, A. Kilzer, A. Narayanan, E. W. Felten, V. Shmatikov
Published: 2011
Differentially private recommender systems: Building privacy into the netflix prize contenders
F. McSherry, I. Mironov
Published: 2009
Privacy-preserving matrix factorization
V. Nikolaenko, S. Ioannidis, U. Weinsberg, M. Joye, N. Taft, D. Boneh
Published: 2013
Calibrating noise to sensitivity in private data analysis
Cynthia Dwork, Frank McSherry, Kobbi Nissim, Adam Smith
Published: 2006
Mechanism design via differential privacy
F. McSherry, K. Talwar
Published: 2007
Differentially private recommendation systems: Practical implementation and interpretation
Y. Park, A. Acharya
Published: 2011
Differentially private empirical risk minimization
K. Chaudhuri, C. Monteleoni, A. D. Sarwate
Published: 2011
Privacy-preserving logistic regression
K. Chaudhuri, C. Monteleoni
Published: 2008
Fast differentially private matrix factorization
Z. Liu, Y.-X. Wang, A. Smola
Published: 2015
Differentially private matrix factorization
J. Hua, C. Xia, S. Zhong
Published: 2015
Distributed differentially private algorithms for matrix and tensor factorization
H. Imtiaz, A. D. Sarwate
Published: 2018
Differentially private distributed constrained optimization
S. Han, U. Topcu, G. J. Pappas
Published: 2016
Analyze gauss: optimal bounds for privacy-preserving principal component analysis
Cynthia Dwork
Published: 2014
The noisy power method: A meta algorithm with applications
Moritz Hardt, Eric Price
Published: 2014
Symmetric matrix perturbation for differentially-private principal component analysis
H. Imtiaz, A. D. Sarwate
Published: 2016
Signal processing and machine learning with differential privacy: Algorithms and challenges for continuous data
A. D. Sarwate, K. Chaudhuri
Published: 2013
R´enyi differential privacy
I. Mironov
Published: 2017
Differential privacy: A survey of results
C. Dwork
Published: 2008
The matrix cookbook
Kaare Brandt Petersen, Michael Syskind Pedersen
Published: 2008
Share