arXiv:2608.02052cs.LG2026-08中稿 · publication at the…

首次系统审计出行预测模型的隐私泄露风险,发现其易记忆用户敏感轨迹。

Secrets Everywhere: Auditing Memorization in Mobility Prediction Models

论文配图:Secrets Everywhere: Auditing Memorization in Mobility Prediction Models
图 1 · 摘自论文原文
  • 提出多粒度记忆量化框架,评估位置、锚点对与子轨迹段的记忆程度。
  • 实测显示记忆现象普遍存在,且与用户行为规律性正相关。
  • 适合关注隐私安全的智慧城市、导航服务开发者参考。

出行预测模型广泛应用于城市分析、导航和个性化服务,但其可能从训练数据中记忆并暴露敏感用户轨迹的隐私风险尚不明确。尽管语言模型中的记忆问题已被研究,出行预测因序列包含多时空尺度的人类行为,隐私风险更具复杂性。本文首次系统性审计出行预测模型的记忆风险。针对缺乏随机空间、轨迹多尺度结构及用户行为多样性等挑战,我们提出一个分层级记忆量化框架,涵盖个体位置、锚点对和子轨迹段。同时构建基于用户的参照集,评估模型在推理时更倾向选择训练数据而非合理替代方案的可能性。在多个模型与数据集上的实验表明,记忆现象普遍存在,且与用户行为规律性正相关,显著提升推理时的数据提取风险。研究呼吁对出行预测模型实施强制性隐私审计。

原文摘要 · Abstract (English)

Human mobility prediction models, which forecast the next location in a user's trajectory, are increasingly deployed in urban analytics, navigation, and personalized services. Yet, little is known about their potential to memorize and expose sensitive user trajectories from training data. While memorization has been extensively studied in language models, mobility prediction poses unique challenges: training sequences encode human behavior at various spatial and temporal scales, creating privacy risks at different granularities. In this paper, we conduct the first systematic audit of memorization in mobility prediction models. While prior work has shown that privacy leaks can arise from such models, we systematically assess and quantify memorization risks at scale. We identify key challenges, including the lack of a randomness space, the multi-scale structure of trajectories, and user-specific behavioral diversity. To address these challenges, we introduce a framework to quantify mobility memorization at different levels of granularity: individual locations, anchor pairs, and subtrajectory segments. We also develop user-grounded reference sets to assess how likely a model is to prefer training data over realistic alternatives. Our evaluation across multiple models and datasets reveals pervasive memorization patterns that correlate with user regularity and increase the risk of data extraction at inference time. Our findings call for mandatory privacy auditing in mobility prediction models.

隐私安全出行预测记忆审计

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。