arXiv:2512.16851cs.CRcs.AI2025-12被引 3

用可解释AI精准选择敏感数据加噪,保护虚拟现实用户隐私。

PrivateXR: Defending Privacy Attacks in Extended Reality Through Explainable AI-Guided Differential Privacy

  • 通过可解释AI识别关键敏感特征,仅对它们应用差分隐私。
  • 隐私攻击成功率降低43%~39%,模型准确率仍达97%。
  • 支持实时调节隐私等级,适合注重隐私的XR应用开发者。

人工智能与扩展现实(AI XR)技术的融合带来了跨领域的创新应用,但其使用的眼动追踪等敏感数据易被攻击者利用,通过成员推断攻击(MIA)和再识别攻击(RDA)高成功率泄露个人信息。现有差分隐私(DP)方法因对所有特征统一加噪,导致噪声过多、精度下降、推理延迟增加,难以满足实时XR部署需求。为此,本文提出一种结合可解释AI(XAI)与差分隐私的新型防御框架:利用后验解释识别模型中最关键特征,在推理时仅对这些特征施加DP保护。在三种主流AI XR模型和三个数据集(晕动症、情绪、行为分类)上评估表明,该方法使晕动症任务的MIA和RDA成功率分别降低43%和39%,同时保持高达97%的模型准确率,并将推理速度提升约2倍。为验证实用性,我们在HTC VIVE Pro头显上部署了该框架,开发了名为PrivateXR的用户界面,支持用户实时调节隐私级别(低/中/高),并在游戏过程中获得预测结果,实现隐私保护与交互体验的平衡。

原文摘要 · Abstract (English)

The convergence of artificial AI and XR technologies (AI XR) promises innovative applications across many domains. However, the sensitive nature of data (e.g., eye-tracking) used in these systems raises significant privacy concerns, as adversaries can exploit these data and models to infer and leak personal information through membership inference attacks (MIA) and re-identification (RDA) with a high success rate. Researchers have proposed various techniques to mitigate such privacy attacks, including differential privacy (DP). However, AI XR datasets often contain numerous features, and applying DP uniformly can introduce unnecessary noise to less relevant features, degrade model accuracy, and increase inference time, limiting real-time XR deployment. Motivated by this, we propose a novel framework combining explainable AI (XAI) and DP-enabled privacy-preserving mechanisms to defend against privacy attacks. Specifically, we leverage post-hoc explanations to identify the most influential features in AI XR models and selectively apply DP to those features during inference. We evaluate our XAI-guided DP approach on three state-of-the-art AI XR models and three datasets: cybersickness, emotion, and activity classification. Our results show that the proposed method reduces MIA and RDA success rates by up to 43% and 39%, respectively, for cybersickness tasks while preserving model utility with up to 97% accuracy using Transformer models. Furthermore, it improves inference time by up to ~2x compared to traditional DP approaches. To demonstrate practicality, we deploy the XAI-guided DP AI XR models on an HTC VIVE Pro headset and develop a user interface (UI), namely PrivateXR, allowing users to adjust privacy levels (e.g., low, medium, high) while receiving real-time task predictions, protecting user privacy during XR gameplay.

隐私保护XR应用可解释AI差分隐私

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。