对比两种隐私保护方法在推荐系统中的效果,发现不同模型受隐私影响各异。
Privacy-Utility-Bias Trade-offs for Privacy-Preserving Recommender Systems
- 比较DPSGD与LDP在四种推荐模型上的隐私-精度-公平性权衡
- 强隐私下精度下降,但NCF损失最小(ε≈1时<10%)
- 模型对隐私敏感度不同,适合场景各异
推荐系统基于用户历史评分生成个性化推荐列表。为保护用户数据,越来越多系统引入差分隐私(DP)。本文全面评估了两种DP机制——差分私有随机梯度下降(DPSGD)和局部差分隐私(LDP)——在四个推荐模型(神经协同过滤NCF、贝叶斯个性化排序BPR、奇异值分解SVD、变分自编码器VAE)上的表现,使用MovieLens-1M和Yelp数据集。结果表明:更强的隐私保护会降低推荐精度,但影响不均。NCF在DPSGD下精度损失最小(ε≈1时低于10%),而SVD和BPR对小众用户群体影响更大;VAE对稀疏群体极为敏感,精度骤降。公平性方面,DPSGD通常缩小热门与冷门项目间的推荐差距,而LDP更保持原有模式。这说明没有通用最优方案,不同机制在不同隐私水平和数据条件下各有优劣。
原文摘要 · Abstract (English)
Recommender systems (RSs) output ranked lists of items, such as movies or restaurants, that users may find interesting, based on the user's past ratings and ratings from other users. RSs increasingly incorporate differential privacy (DP) to protect user data, raising questions about how privacy mechanisms affect both recommendation accuracy and fairness. We conduct a comprehensive, cross-model evaluation of two DP mechanisms, differentially private stochastic gradient descent (DPSGD) and local differential privacy (LDP), applied to four recommender systems (Neural Collaborative Filtering (NCF), Bayesian Personalized Ranking (BPR), Singular Value Decomposition (SVD), and Variational Autoencoder (VAE)) on the MovieLens-1M and Yelp datasets. We find that stronger privacy consistently reduces utility, but not uniformly. NCF under DPSGD shows the smallest accuracy loss (under 10 percent at epsilon approximately 1), whereas SVD and BPR experience larger drops, especially for users with niche preferences. VAE is the most sensitive to privacy, with sharp declines for sparsely represented groups. The impact on bias metrics is similarly heterogeneous. DPSGD generally reduces the gap between recommendations of popular and less popular items, whereas LDP preserves existing patterns more closely. These results highlight that no single DP mechanism is uniformly superior; instead, each provides trade-offs under different privacy regimes and data conditions.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。