EDBT 2026 Demo / reviewers in the wild / expert
Hao Zhou 0034
dblp:63/778-34
· DBLP profile ↗
12ranked-venue papers
5as first author
12since 2021 · last 2026
0000-0002-9040-8100ORCID · verified
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 4 · 3 first-author · 4 since 2021Systems, architecture and hardware · 2 · 2 since 2021Computer networks · 2 · 2 since 2021Databases, data management, data science and information retrieval · 2 · 2 since 2021Artificial intelligence and machine learning · 1 · 1 since 2021Software engineering, systems software and programming languages · 1 · 1 first-author · 1 since 2021Applied, interdisciplinary, general and emerging computing · 1 · 1 first-author · 1 since 2021
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Robust Privacy-Preserving Federated Learning for Edge Computing With New Client IntegrationabstractFederated learning (FL) is a key paradigm for deploying AI models across large numbers of Internet of Things (IoT) devices in edge computing. While FL avoids uploading raw data to a central server, client privacy remains vulnerable during new client integration, when previously unseen devices first register their identities and cryptographic keys. A malicious or semi-honest central server (CS) can manipulate training to isolate target gradients, reconstruct local data, and tamper with aggregation. We study the Identity Forgery and Gradient Inversion Attack (IFGIA) against federated edge learning. By fabricating virtual clients and exploiting secure aggregation, a malicious CS can recover target gradients with success rates above 99.5% under realistic edge settings, revealing a critical weakness in existing privacy-preserving and verifiable FL schemes. To defend against IFGIA, we propose Robust Federated Learning (RFL), a framework tailored for edge computing that combines model splitting between edge clients and edge servers, lightweight differential privacy on intermediate representations, and split verification using digital signatures and homomorphic hashes. Experiments show that RFL reduces IFGIA's success rate to 73.6%, shrinks per-client communication from 375 MB to 40 KB, accelerates edge-side training by at least 10×, and maintains competitive accuracy. Hao Zhou 0034, Hua Dai 0003, Geng Yang 0002, Yang Xiang 0001 |
IEEE Trans. Dependable Secur. Comput. | 1 |
| 2025 | A Privacy-preserving Spatial Dataset Joinable Search in CloudabstractIn the era of big data, the demand for spatial dataset search has become increasingly urgent. Leveraging the powerful storage and computing capabilities of cloud platforms, the cloud has become a common choice for deploying dataset search services. However, under risks of untrusted cloud environment and malicious attacks, protecting the privacy of sensitive location information during spatial dataset search becomes particularly critical. This paper focuses on the problem of privacy-preserving spatial datasets joinable search in cloud, which has not been addressed in existing research. We first propose a grid-based joinable coverage distinction model to measure the joinability of spatial datasets, and further present a baseline scheme (PDJDS). To further enhance efficiency and reduce storage cost, we propose an optimized scheme (PDJDS+), which constructs a coarse-grained grid-based inverted index to filter candidate datasets and integrates a joinable coverage distinction check table to expedite the evaluation of spatial dataset coverage distinction. Experiments conducted on three real-world spatial data repositories demonstrate that our scheme achieves superior performance in terms of search accuracy, efficiency, and storage cost. Zhengkai Zhang, Hua Dai 0003, Hao Zhou 0034, Mingfeng Jiang, Pengyue Li, Geng Yang 0002 |
CIKM | 3 |
| 2025 | Grayscale Image-Based Top-k Spatial Dataset Search Processing
Hua Dai 0003, Pengyue Li, Sheng Wang 0007, Bohan Li 0001, Hao Zhou 0034, Geng Yang 0002 |
DASFAA (2) | 6 |
| 2025 | ACSFL: An adaptive client selection-based Federated Learning with personalized differential privacy for heterogeneous AIoT environments
Zhousheng Wang, Hua Dai 0003, Jian Xu 0026, Geng Yang 0002, Hao Zhou 0034 |
Comput. Commun. | 6 |
| 2025 | Federated adaptive pruning with differential privacy
Zhousheng Wang, Jiahe Shen, Hua Dai 0003, Jian Xu 0026, Geng Yang 0002, Hao Zhou 0034 |
Future Gener. Comput. Syst. | 6 |
| 2025 | Robust Federated Learning for Privacy Preservation and Efficiency in Edge ComputingabstractFederated Learning (FL) has emerged as a key enabler of privacy-preserving distributed model training in edge computing environments, crucial for service-oriented applications such as personalized healthcare, smart cities, and intelligent assistants. However, existing privacy-preserving FL methods are susceptible to multiple privacy leakage attacks (MPLA), where adversaries infer sensitive information through repeated gradient updates. This paper proposes a Robust and Communication-Efficient Federated Learning (RCFL) framework designed to enhance privacy protection and communication efficiency in edge-based service environments. RCFL integrates a global privacy-preserving mechanism with an innovative privacy encoding strategy that minimizes privacy risks over multiple data releases while significantly reducing communication overhead. The proposed framework's theoretical analysis demonstrates its ability to maintain differential privacy across numerous interactions, ensuring robust model convergence and efficiency. Experimental results using MNIST and CIFAR-10 datasets reveal that RCFL can lower the MPLA success rate from 88.56% to 42.57% compared to state-of-the-art methods, while reducing communication costs by over 90%. These findings underscore RCFL's potential to enhance security, efficiency, and scalability in service-oriented edge computing applications. Hao Zhou 0034, Hua Dai 0003, Geng Yang 0002, Yang Xiang 0001 |
IEEE Trans. Serv. Comput. | 1 |
| 2024 | ESDRS: Efficient Spatial Dataset Range Search ProcessingabstractWith the significant increase in open spatial datasets, there is a growing need to search for datasets that meet users’ requirements for decision-making and machine learning. This has become a prominent issue, leading to various spatial dataset search requirements, including the need for spatial dataset range search. In this paper, we propose spatial dataset range search schemes, which is the first systematic study of spatial dataset range search processing according to the best of our knowledge. A baseline spatial dataset range search scheme is first proposed to process spatial dataset range searches. To improve the search efficiency, we proposed two optimized search schemes, the accuracy-first optimized search scheme and the efficiency-first optimized search scheme. In the former optimized scheme, the spatial dataset-MBR-based R-tree (SDMR-tree) is designed to filter candidate datasets without compromising search accuracy. In the latter optimized scheme, the dataset-grid inverted index (DGI-index) storing the spatial dataset grid distributions is designed and used to determine the search result approximately. The search efficiency is further improved but with a bit loss of accuracy. Comprehensive experiments on real-world data validate the accuracy and efficiency of the proposed search schemes. Zhangchen Li, Hua Dai 0003, Hao Zhou 0034, Pengyue Li, Geng Yang 0002 |
HPCC | 4 |
| 2024 | VPPFL: A verifiable privacy-preserving federated learning scheme against poisoning attacks
Yuxian Huang, Geng Yang 0002, Hao Zhou 0034, Hua Dai 0003, Dong Yuan 0001, Shui Yu 0001 |
Comput. Secur. | 3 |
| 2023 | A Lightweight Matrix Factorization for Recommendation With Local Differential Privacy in Big DataabstractThe proliferation of various items recommended by Internet-based systems has resulted in the exponential growth of the number of ratings in the big data era. Recent advances in matrix factorization have made it an effective way to process these ratings for recommendations. However, we confront a challenge in deploying a matrix factorization model for recommendations in big data that arises from the typically resource-constrained local devices regarding their storage space and computing capacity. This paper proposes a novel lightweight matrix factorization for recommendations. Our scheme deploys shard grandients training on user local internet of things(IoT) devices, which makes it possible for users to train big data model locally. We design a two-phase solution to protect the security of users’ data and reduce the dimension of the items. Moreover, we optimize the proposed scheme by introducing a stabilization mechanism to decrease the scale of the perturbed gradients. Some experimental results are given with two real online datasets, MovieLens and LibimSeTi. The theoretical analysis and experimental results demonstrate that compared with other methods, the proposed scheme achieves a good performance in terms of security, accuracy, and efficiency. Hao Zhou 0034, Geng Yang 0002, Yang Xiang 0001, Yunlu Bai, Weiya Wang |
IEEE Trans. Big Data | 1 |
| 2023 | Privacy-Preserving and Verifiable Federated Learning Framework for Edge ComputingabstractIn federated learning (FL), each client collaboratively trains the global model through the cloud server (CS) without sharing its original dataset in edge computing. However, CS can analyze and forge the uploaded parameters and infer the privacy of clients, which calls for the necessity of verifying the integrity and protecting the privacy for aggregation. Although there are some works to ensure the verifiability of aggregation results, there is still a lack of work on analyzing the relationship between verification and dropout rate for edge computing. In this work, we propose privacy-preserving and verifiable federated learning (PVFL) with low communication and computation overhead for verification. We theoretically demonstrate that PVFL has three properties: 1) the communication overhead for verification is independent of the dropouts and the dimension of the parameter vector; 2) the computation overhead for verification is independent of the dropouts; 3) the value of the loss function is negatively correlated with the number of dropouts. Experimental results demonstrate the correctness of our theoretical results and practical performance with a high dropout rate, thereby facilitating the design of privacy-preserving and verifiable FL algorithms for edge computing with a high dimension of parameter vectors and a high dropout rate. Hao Zhou 0034, Geng Yang 0002, Yuxian Huang, Hua Dai 0003, Yang Xiang 0001 |
IEEE Trans. Inf. Forensics Secur. | 1 |
| 2022 | PFLF: Privacy-Preserving Federated Learning Framework for Edge ComputingabstractFederated learning (FL) can protect clients’ privacy from leakage in distributed machine learning. Applying federated learning to edge computing can protect the privacy of edge clients and benefit edge computing. Nevertheless, eavesdroppers can analyze the parameter information to specify clients’ private information and model features. And it is difficult to achieve a high privacy level, convergence, and low communication overhead during the entire process in the FL framework. In this paper, we propose a novel privacy-preserving federated learning framework for edge computing (PFLF). In PFLF, each client and the application server add noise before sending the data. To protect the privacy of clients, we design a flexible arrangement mechanism to count the optimal training times for clients. We prove that PFLF guarantees the privacy of clients and servers during the entire training process. Then, we theoretically prove that PFLF has three main properties: 1) For a given privacy level and model aggregation times, there is an optimal number of participating times for clients; 2) There is an upper and lower bound of convergence; 3) PFLF achieves low communication overhead by designing a flexible participation training mechanism. Simulation experiments confirm the correctness of our theoretical analysis. Therefore, PFLF helps design a framework to balance privacy levels and convergence and achieve low communication overhead when there is a part of clients dropping out of training. Hao Zhou 0034, Geng Yang 0002, Hua Dai 0003, Guoxiu Liu |
IEEE Trans. Inf. Forensics Secur. | 1 |
| 2021 | Travel Trajectory Frequent Pattern Mining Based on Differential Privacy ProtectionabstractNow, many application services based on location data have brought a lot of convenience to people’s daily life. However, publishing location data may divulge individual sensitive information. Because the location records about location data may be discrete in the database, some existing privacy protection schemes are difficult to protect location data in data mining. In this paper, we propose a travel trajectory data record privacy protection scheme (TMDP) based on differential privacy mechanism, which employs the structure of a trajectory graph model on location database and frequent subgraph mining based on weighted graph. Time series is introduced into the location data; the weighted trajectory model is designed to obtain the travel trajectory graph database. We upgrade the mining of location data to the mining of frequent trajectory graphs, which can discover the relationship of location data from the database and protect location data mined. In particular, to improve the identification efficiency of frequent trajectory graphs, we design a weighted trajectory graph support calculation algorithm based on canonical code and subgraph structure. Moreover, to improve the data utility under the premise of protecting user privacy, we propose double processes of adding noises to the subgraph mining process by the Laplace mechanism and selecting final data by the exponential mechanism. Through formal privacy analysis, we prove that our TMDP framework satisfies ε‐differential privacy. Compared with the other schemes, the experiments show that the data availability of the proposed scheme is higher and the privacy protection of the scheme is effective. Weiya Wang, Geng Yang 0002, Lin Bao, Ke Ma 0009, Hao Zhou 0034, Yunlu Bai |
Wirel. Commun. Mob. Comput. | 5 |