Location Leakage in Federated Signal Maps
  We consider the problem of predicting cellular network performance (signal
maps) from measurements collected by several mobile devices. We formulate the
problem within the online federated learning framework: (i) federated learning
(FL) enables users to collaboratively train a model, while keeping their
training data on their devices; (ii) measurements are collected as users move
around over time and are used for local training in an online fashion. We
consider an honest-but-curious server, who observes the updates from target
users participating in FL and infers their location using a deep leakage from
gradients (DLG) type of attack, originally developed to reconstruct training
data of DNN image classifiers. We make the key observation that a DLG attack,
applied to our setting, infers the average location of a batch of local data,
and can thus be used to reconstruct the target users' trajectory at a coarse
granularity. We show that a moderate level of privacy protection is already
offered by the averaging of gradients, which is inherent to Federated
Averaging. Furthermore, we propose an algorithm that devices can apply locally
to curate the batches used for local updates, so as to effectively protect
their location privacy without hurting utility. Finally, we show that the
effect of multiple users participating in FL depends on the similarity of their
trajectories. To the best of our knowledge, this is the first study of DLG
attacks in the setting of FL from crowdsourced spatio-temporal data.
