A differential privacy framework for matrix factorization recommender systems

• Published in: User modeling and user-adapted interaction Vol. 26; no. 5; pp. 425 - 458
• Main Authors: Friedman, Arik, Berkovsky, Shlomo, Kaafar, Mohamed Ali
• Format: Journal Article
• Language: English
• Published: Dordrecht Springer Netherlands 01-12-2016; Springer Nature B.V
• Subjects: Access to information; Accuracy; Algorithms; Analysis; Collaboration; Computer Science; Customization; Datasets; Factorization; Feedback; Gain; Management of Computing and Information Systems; Mathematical models; Multimedia Information Systems; Neighborhoods; Noise; Personal information; Perturbation methods; Privacy; Ratings & rankings; Recommender systems; Studies; Tradeoffs; User behavior; User Interfaces and Human Computer Interaction; Differential Privacy; Alternate Little Square; Recommender System; Matrix Factorization; Stochastic Gradient Descent
• ISSN: 0924-1868; 1573-1391
• DOI: 10.1007/s11257-016-9177-7

Recommender systems rely on personal information about user behavior for the recommendation generation purposes. Thus, they inherently have the potential to hamper user privacy and disclose sensitive information. Several works studied how neighborhood-based recommendation methods can incorporate user privacy protection. However, privacy preserving latent factor models, in particular, those represented by matrix factorization techniques, the state-of-the-art in recommender systems, have received little attention. In this paper, we address the problem of privacy preserving matrix factorization by utilizing differential privacy, a rigorous and provable approach to privacy in statistical databases. We propose a generic framework and evaluate several ways, in which differential privacy can be applied to matrix factorization. By doing so, we specifically address the privacy-accuracy trade-off offered by each of the algorithms. We show that, of all the algorithms considered, input perturbation results in the best recommendation accuracy, while guaranteeing a solid level of privacy protection against attacks that aim to gain knowledge about either specific user ratings or even the existence of these ratings. Our analysis additionally highlights the system aspects that should be addressed when applying differential privacy in practice, and when considering potential privacy preserving solutions.