{"id":"https://openalex.org/W7163353310","doi":"https://doi.org/10.48550/arxiv.2606.03711","title":"Ghost: Plausible Yet Unlearnable Trajectories via On-Manifold Substitution for Next-POI Privacy","display_name":"Ghost: Plausible Yet Unlearnable Trajectories via On-Manifold Substitution for Next-POI Privacy","publication_year":2026,"publication_date":"2026-06-02","ids":{"openalex":"https://openalex.org/W7163353310","doi":"https://doi.org/10.48550/arxiv.2606.03711"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.03711","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03711","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.03711","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137716848","display_name":"Zhenyu Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Zhenyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086316879","display_name":"Jihong Guan","orcid":"https://orcid.org/0000-0003-2313-7635"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guan, Jihong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137794567","display_name":"Shuigeng Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Shuigeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9854999780654907,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9854999780654907,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0044999998062849045,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.00139999995008111,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7286999821662903},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6765000224113464},{"id":"https://openalex.org/keywords/substitution","display_name":"Substitution (logic)","score":0.5914000272750854},{"id":"https://openalex.org/keywords/bigram","display_name":"Bigram","score":0.4456999897956848},{"id":"https://openalex.org/keywords/trajectory","display_name":"Trajectory","score":0.38609999418258667},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.3822999894618988},{"id":"https://openalex.org/keywords/randomized-response","display_name":"Randomized response","score":0.34470000863075256},{"id":"https://openalex.org/keywords/aggregate","display_name":"Aggregate (composite)","score":0.33709999918937683}],"concepts":[{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7286999821662903},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6765000224113464},{"id":"https://openalex.org/C2778220771","wikidata":"https://www.wikidata.org/wiki/Q1522579","display_name":"Substitution (logic)","level":2,"score":0.5914000272750854},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5022000074386597},{"id":"https://openalex.org/C108757681","wikidata":"https://www.wikidata.org/wiki/Q2773912","display_name":"Bigram","level":3,"score":0.4456999897956848},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.414000004529953},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.38609999418258667},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.3822999894618988},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3815999925136566},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3490000069141388},{"id":"https://openalex.org/C2776441110","wikidata":"https://www.wikidata.org/wiki/Q1436628","display_name":"Randomized response","level":3,"score":0.34470000863075256},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.33709999918937683},{"id":"https://openalex.org/C529865628","wikidata":"https://www.wikidata.org/wiki/Q1790740","display_name":"Manifold (fluid mechanics)","level":2,"score":0.29440000653266907},{"id":"https://openalex.org/C1921717","wikidata":"https://www.wikidata.org/wiki/Q1334846","display_name":"Mahalanobis distance","level":2,"score":0.2896000146865845},{"id":"https://openalex.org/C7606001","wikidata":"https://www.wikidata.org/wiki/Q4686702","display_name":"Adversary model","level":3,"score":0.28110000491142273},{"id":"https://openalex.org/C102408133","wikidata":"https://www.wikidata.org/wiki/Q5156350","display_name":"Competitive analysis","level":3,"score":0.2736999988555908},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2685000002384186},{"id":"https://openalex.org/C196921405","wikidata":"https://www.wikidata.org/wiki/Q786431","display_name":"Online algorithm","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.26010000705718994},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.25929999351501465},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.03711","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03711","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.03711","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03711","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5630268454551697,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"A":[0],"publisher":[1],"who":[2],"releases":[3],"check-in":[4,84],"trajectories":[5],"inadvertently":[6],"publishes":[7],"a":[8,75,101,107,115,120],"strong":[9],"predictor":[10],"of":[11,41,69,163,178,195],"every":[12],"user's":[13],"future":[14],"locations.":[15],"We":[16,72],"address":[17],"this":[18],"risk":[19],"by":[20],"generating":[21],"unlearnable":[22,43],"trajectories,":[23],"perturbed":[24],"sequences":[25,85],"that":[26,65],"yield":[27],"victim":[28],"models":[29],"with":[30,135,182],"degraded":[31],"next-Point-of-Interest":[32],"(next-POI)":[33],"accuracy":[34,146],"on":[35,46,153,165],"clean":[36],"test":[37],"inputs.":[38],"Direct":[39],"ports":[40],"image-domain":[42],"examples":[44],"fail":[45],"two":[47,124],"counts.":[48],"The":[49],"published":[50],"data":[51],"must":[52,61],"remain":[53],"geographically":[54],"and":[55,58,114,127,156],"semantically":[56],"plausible,":[57],"the":[59,67,97,136,143,148,166,171,175,183,196],"perturbation":[60],"resist":[62],"purification":[63,151],"adversaries":[64],"exploit":[66],"structure":[68],"randomized":[70,180],"defences.":[71],"propose":[73],"Ghost,":[74],"manifold-aligned":[76],"framework":[77],"whose":[78],"perturbations":[79],"look":[80],"like":[81],"plausible":[82],"human":[83],"yet":[86],"leave":[87],"no":[88],"learnable":[89],"signal":[90],"behind.":[91],"Ghost":[92,131],"steers":[93],"each":[94],"substitution":[95],"onto":[96],"real-trajectory":[98],"manifold":[99,172],"through":[100],"frozen":[102],"trajectory":[103],"language":[104],"model,":[105],"so":[106],"denoising-bridge":[108],"adversary":[109,118,152],"has":[110],"nothing":[111],"to":[112],"invert":[113],"context-free":[116],"frequency-table":[117,184],"recovers":[119],"near-uniform":[121],"distribution.":[122],"Across":[123],"standard":[125,161],"benchmarks,":[126],"four":[128],"attacker":[129],"postures,":[130],"achieves":[132],"protection-gap":[133],"competitive":[134],"strongest":[137],"deterministic":[138],"baseline":[139],"(PGD)":[140],"while":[141],"attaining":[142],"lowest":[144],"restored":[145],"under":[147],"bigram":[149],"adaptive":[150],"both":[154],"datasets,":[155],"lies":[157],"within":[158,189],"one":[159],"per-cell":[160],"deviation":[162],"PGD":[164],"protection-versus-purification-resistance":[167],"plane.":[168],"Ablations":[169],"confirm":[170],"prior":[173,179],"subsumes":[174],"entropy-floor":[176],"knob":[177],"defences,":[181],"adversary's":[185],"survival":[186],"gap":[187],"remaining":[188],"0.04":[190],"even":[191],"when":[192],"twenty":[193],"percent":[194],"pairs":[197],"are":[198],"leaked.":[199]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-04T00:00:00"}
