Federated Graph Learning for Cross-Domain Recommendation
Authors: Ziqi Yang
Zhaopeng Peng
Zihui Wang
Jianzhong Qi
Chaochao Chen
Weike Pan
Chenglu Wen
Cheng Wang
Xiaoliang Fan
Venue: NeurIPS 2024 poster (2024)
Keywords: federated learning; cross-domain recommendation; negative transfer; GNN
Primary area: graph_neural_networks

Abstract: Cross-domain recommendation (CDR) offers a promising solution to the data sparsity problem by enabling knowledge transfer across source and target domains. However, many recent CDR models overlook crucial issues such as privacy as well as the risk of negative transfer (which negatively impact model performance), especially in multi-domain settings. To address these challenges, we propose FedGCDR, a novel federated graph learning framework that securely and effectively leverages positive knowledge from multiple source domains. First, we design a positive knowledge transfer module that ensures privacy during inter-domain knowledge transmission. This module employs differential privacy-based knowledge extraction combined with a feature mapping mechanism, transforming source domain embeddings from federated graph attention networks into reliable domain knowledge. Second, we design a knowledge activation module to filter out potential harmful or conflicting knowledge from source domains, addressing the issues of negative transfer. This module enhances target domain training by expanding the graph of the target domain to generate reliable domain attentions and fine-tunes the target model for improved negative knowledge filtering and more accurate predictions. We conduct extensive experiments on 16 popular domains of the Amazon dataset, demonstrating that FedGCDR significantly outperforms state-of-the-art methods.

Federated Graph Learning for Cross-Domain Recommendation
Ziqi Yang Zhaopeng Peng Zihui Wang Jianzhong Qi Chaochao Chen', Weike Pan Chenglu Wen 1.2 Cheng Wang 1.2 Xiaoliang Fan 1.2x
Fujian Key Laboratory of Sensing and Computing for Smart Cities, Xiamen University, China
Key Laboratory of Multimedia Trusted Perception and Efficient Computing.
Ministry of Education of China, Xiamen University, China
School of Computing and Information Systems, The University of Melbourne, Australia
*College of Computer Science and Technology. Zhejiang University Hangzhou, China
"College of Computer Science and Software Engineering, Shenzhen University Shenzhen, China pyangaigg.pengzhhpppngg.gg wangziwei xmu. edu. cn
wwwgzhaopeng......m..maaaa {clwen, ewang, famxiaoliann (aaooolaannnnmmmmmm @xmu. edu.
j liazhongg qi qi@unimelb.b... edu. au, zjucccθzju. edu. cn, panweikedszu, edu. cn
Abstract
Cross-domain recommendation (CDR) offers a promising solution the data spar- sity problem by enabling knowledge transfer between source and target domains. However, many recent CDR models overlook crucial issues such as privacy as well as the risk of negative transfer (which negatively impact model performance), espe- cially in multi-domain settings. To address these challenges, we propose FedGCDR, novel federated graph learning framework that securely and effectively leverages positive knowledge from multiple source domains. First, we design a positive knowledge transfer module that ensures privacy during inter-domain knowledge transmission. This module employs differential privacy-based knowledge extrac- tion combined with feature mapping mechanism, transforming source domain em- beddings from federated graph attention networks into reliable domain knowledge. Second, design knowledge activation module to filter potential harmful or conflicting knowledge from source domains, addressing the issues of negative transfer. This module enhances target domain training by expanding the graph of the target domain to generate reliable domain attentions and fine-tunes the target model for improved negative knowledge filtering and more accurate predictions. We conduct extensive experiments on 16 popular domains of the Amazon dataset, demonstrating that FedGCDR significantly outperforms state-of-the-art methods. We open source the code at https: //tpt/gtttttttt//// com/LaafinHan//odoOOO
Introduction
Cross-domain recommendation (CDR) has emerged as an effective solution for mitigating data sparsity recommender systems 1 2 4 5). CDR operates by integrating auxiliary information from source domains, thereby enhancing recommendation relevance the target domain. Recently, to address data privacy constraints, many privacy- pereccypreserring CDR frameworks have been proposed 6 7 g 9 which achieve strong performance under the assumptions of data sparsíty and a dual-domain model (i.e., typically involving single source domain and single target domain).
In this paper, we focus on more generic scenario of Broader-Source Cross-Domain Recom- mendation (BS-CDR), which integrates knowledge from more than two source domains while
TThe corresponding author.
38th Conference on Neural Information Processing Systems (NcurIPS 2024).

---

Positive transfer
Negative transler
Feature spaca
Ideal model
Our method
Exisiig methods!
Fake milinge
Privac- presening techniques
Negative transter
Positive transfer
Single damain
Performance
Clathing
Books
Toys
Server
Server
Useera
Games
Music
Phone
Server
2
Movie
?2
Sports
3
Number of Domains
(a) The BS-CDR scenario.
(b) The performance affected by the number of domains
Figure 1: (a) In order to obtain accurate recommendations in the Books domain, we aim to exploit user preferences (i.e., knowledge of external domains should be fully utilized, e.g. Movie, Toys, and Games domains). However, with the influence of lossy privacy-preserving techniques, the results of the transfer could be negative (e.g., the Music domain with low-quality data). (b) There is a diminishing marginal effect on the growth rate of the model performance with pure positive knowledge, while NT accumulates with increasing number of source domains. Consequently, the performance of existing methods declines and is worse than that of a single domain model.
preserving privacy. Given the diverse nature user preferences, it is essential to gain a more holistic understanding of user interests by incorporating user behaviors from diversified domains [10] 11). For example, in Figure Ta] a user who enjoys certain types of books might also enjoy movies, toys, and games in similar genres. However, incorporating more domains while preserving privacy poses challenges to counteract negative transfer (NT), which is a phenomenon of transferring knowledge from source domain that negatively impacts the performance of the recommender model in the target domain [12]. Suppose that the Books domain in Figure Ia is the target domain. The Clothing domain causes NT because of the domain discrepancy. While the Music domain supposed to transfer positive knowledge, it might also lead to NT because of lossy applied to broader source domains. As a result, the influx of negative knowledge accumulated from the source domains will poison the model performance of the target domain in BS-CDR scenarios.
prracccpreeerving techniques
To mitigate the NT issue, attention mechanisms have been widely leveraged, either in an explicit (e.g.. determine domain attentions by predefined domain features 13 14]) or implicit manner (e.g., employ hyper-parameters 7 15)). Several other studies [16
18 ensure positive transfer by passing only domain-shared features. However, existing methods cannot be directly applied to BS-CDR due to two major challenges. First, inadequate privacy preservation (CH1). Both intra-domain and inter-domain privacy must be carefully considered in BS- BS-C... As depicted in Figure Ia BS-CDR relies on extensive knowledge transfer, risking simultaneous privacy leakages across broader source domains -inter-domiin privacy) ( 19 20, 21 Additionally, concerns over centralized data storage may prevent users from sharing sensitive rating data (intra-domain privacy). Second, accumulative negative transfer (CH2). Adjusting intention-relateen
17
for a large number of source domains in BS-CDR scenarios is extremely difficult, as well as predefined or domain-share shared features cannot accommodate complex domain diversities. In addition, the use of various lossy privacy- preserving techniques can further degrade the quality of the transferred knowledge, complicating the achievement of positive transfer. Consequently, the impact of NT can inevitably intensify with an increasing number of source domains [2] and the performance of CDR models can decline to levels lower than those of single-domain models, shown in Figure lb
To address the challenges of privacy (CHI) and NT (CH2) in BS-CDR, we propose Federated Graph learning for Cross Cross-Domain Recommendation (FedGCDR). It follows horizontal-vertical horizontal pipeline 6 and consists of two key modules. First, the positive knowledge transfer module aims to safeguard inter-domain privacy and mitigate potential NT before transfer. This module adopts differential privacy (DP) [22] with a theoretical guarantee and aligns the feature spaces to facilitate positive knowledge transfer. Second, the positive knowledge activation module engaged to further alleviate NT. Specifically, it expands the local graph of the target domain by incorporating virtual social links, enabling the generation of domain attentions. Additionally, it

---

performs target model fine-tuning to optimize the broader-souree CDR. Extensive experiments on 16 popular domains of the Amazon benchmarks demonstrate that FedGCDR outperforms all baseline methods in terms of recommendation accuracy.
Our contributions are summarized follows:
We introduce FedGCDR, a novel federated graph learning framework for CDR that provides high-quality BS-CDR recommendations while safeguarding both privacy and domain confidentiality;
We propose two key model, i.e., the positive knowledge transfer module and the positive knowledge activation module. The first transfer module ensure privacy and positive knowl- edge flows via privacy-preserde knowledge extraction and feature mapping. The second activation module filter harmful information via graph expansion, target domain training and target model fine-tuning;
We conduct extensive experiments on 16 domains of the Amazon datasets that confirm the effectiveness of FedGCDR in terms of recommendation accuracy.
2 Related work
2.1 Cross-domain recommendation
CDR utilizes auxiliary information from external domains to alleviate the data sparsity problem and effectively improve recommendation quality. Li et al. (3 enrich domain knowledge by transferring user-item rating patterns from source domains target domains. Man al. [15] and Elkahky et al.
24 augment entities' embeddings in the target domain by employing a linear or multilayer perceptron (MLP)-based nonlinear mapping function across domains. Liu et al. (25) address the review- based non-overlapped recommendation problem by attribution alignment. Zhao et al. (18] improve the recommendation quality of multi-sparse-domail by mining domain-invariant preferences. Liu et al. 26 achieve knowledge transfer without overlapping users by mining joint preferences. Chen et al.
19 and Liu et al. [27] avoid intermediate result privacy leakage during cross-domain knowledge transfer by employing DP. In these works, the NT problem is often ignored because most of them assume carefully selected dual-domain scenarios limited multi-domain scenarios where NT is not evident. We aim to solve the NT problem in complex BS-CDR scenarios.
2.2 Federated recommendation
has been widely adopted to tackle the privacy issue in recommender system. Chai et al. 33 adopt FL to classic matrix factorization algorithm and utilize homomorphic encryption avoid the potential threat of privacy disclosure. Later, Wu al. (34] explore the application of federated graph neural networks (GNN) models to improve the recommendation quality and ensure user privacy. To utilize sensitive social information, Liu et al.
Recently, federated learning (FL) 28
29
30
31
32
8 adopt local differential privacy (I.D)) and negative sampling. More recent studies use vertical federated learning (VFL) to protect company's privacy in recommender system. Mai al. [35] utilize random projection and ternary quantization to ensure privacy preservation in VFL. In CDR, Chen et al. design dual-target VFL CDR model with orthogonal mapping matrix and LDP for organizations' privacy preservation. Liu et al. (6) design graph convolutional networks (GCN)-based federated framework learn user preference distributions for more accurate recommendations. To ensure user privacy in CDR, Liu et al. [6] utilize a VAE-based federated model to mine user preference with data stored locally. Wu et al. 7 design personal module and a transfer module to provide personalized recommendation while preserving user privacy. These existing works, especially federated CDR frameworks, consider only one type of privacy (intra- or inter-domain). We aim to provide both intra-domain and inter-domain privacy.
3

---

Source domein training (H)
Source
User Space of the 1-th Client
Targel Domein Server
Server M-1
Privacy-pnsarrving
Feature Mapping
Graph Expansion
Domain Training Entedding and Paulinga
Knowledge Extraction
Source Domain
Enteediing
Server
and Parlinss
GAT Layer
GAT Layer
Turget Global Modd
Source Domain
Oriinal Graph
Server
Mall Laper
@
Layer
Layer
Percestion
* GAT Layer N
Target tuning
<(o !
Layer
GAAT
Layara
X
Source Domann Enrrectinng with DP
Saurce
Excedded
Positive Knowledge Transfer Module (V)
Positive Knowledge Activation Module (H)
Figure 2: An overview of FedGCDR, It consists of two key modules and follows a HVH pipeline:
(1) Source Domain Training (Horizontal FL): I Each source domain maintains its graph attention network (GAT)- federated model. (2) Positive Knowledge Transfer Module (Vertical FL): 2
Source domain embeddings are extracted from GAT layers and perturbed with Gaussian noise. The multilayer perceptron aligns the feature space of source domain embeddings and target domain embeddings. (3) Positive Knowledge Activation Module (Horizontal FI.): 4 Local graph is expanded with source domain embeddings. 5 Enhanced federated training of the target domain is achieved through the expanded graph. ④ The target domain maintains its GAT-based federated model. 7 The target domain freezes the GAT layer and fine tunes the model.
3 Methodology
3.1 Problem definition
We consider M (M>3) domains participating in the CDR process. The domains are divided into M-1 source domains D&, D..,..., DSM and one target domain D Each domain is assigned a domain server to conduct intra-domain model training. U is the user set across all the domains, = Ui U UldM where U4; denotes the user set of domain We assume that users partially overlap between domains. Each user is treated as an individual client. User space refers to the virtual space in the user's device containing domain models distributed from each domain server. Meanwhile, V; is the item of domain i. Let R' E | (V be the observed rating matrix of the i-th domain. We consider top-K recommendation. i.e., we learn function to estimate the scores of unobserved entries in the rating matrix, which are later used for item ranking and recommendations. Our goal to achieve highly accurate recommendations in the target domain.
3.2 Framework of FedGCDR
3.2.1
Overview
The overall framework of FedGCDR is shown in Figure 2 FedGCDR follows Horizontal-Verttee
Horizontal (HVH) pipeline, and its two horizontal FL stages ensure the intra-domain privacy. Our two key modules focus on the vertical stage and the second horizontal stage: (1) The positive knowledge transfer module preserves the inter-domain privacy by DP and alleviates NT by feature mapping. (2) The positive knowledge activation module filters out potential harmful or conflicting knowledge from the source domains. Specifically, we expand the local graph of the target domain by virtual social links, such that the target domain graph attention network (GAT) model could generate reliable domain attention based on the expanded graph. After target domain GAT model training, we further mitigate NT by adopting a fine-tuning stage.
Horizontal- Vertical-Horizone pipeline The HVH pipeline contains three stages with switching federated settings. The first horizontal stage refers to the source domain training in which source domain servers individually interact with its domain users (clients). The private rating information is stored within each client, while the clients exchange model and gradients to train a domain speeiffc global model. The next two stages correspond to our two key modules (vertical positive knowledge transfer module and horizontal positive knowledge activation module), which we will cover in detail in the following subsections. It's important to note that the vertical positive knowledge transfer

---

module is completely computed in each client's user space (their personal devices), thus reducing communication overheads. This is because the needed source domain knowledge can be extracted from local source models on each client which are distributed during the first horizontal source domain training stage.
Following the HVH pipeline, we achieve: (1) Privacy enhancement. The two horizontal stages can provide intra-domain privacy preservation, while we further ensure inter-domain privacy by applying DP to the vertical stage. In the mean time, servers are not involved in the knowledge transfer process (i.e.. the positive knowledge transfer module), making them unaware of user interactions in other source domains. (2) Communication efficiency. Cross-domain knowledge transfer does not require additional communication overhead.
Intra-domain GAT-based federated model We adopt a GAT-based 37 38 39 federated frame- work as the underlying model for intra-domain recommender system. The horizontal paradigm avoids centralized storage of user ratings to ensure intra-domain privacy (CH1). In the initial step, each user and item offered an ID embedding of size d, denoted by e el Rd respectively. The For the /-th layer:
embedding is passed through L message propagation layers 40
c = o (W (a e
Σ c(),,
NEN,
where N₂ is the neighbor set of u, W is a learnable weight matrix, al., and d'n are the importance coefficients computed by the attention mechanism:
exp(Leaky (We, We
a up E EVEN. Uu exp(LeakyReLU [W]]]] (e()))
where is the weight vector. Inspired by LighTGCN [43, we discard feature transformation and nonlinear activation for better model efficiency and learning effectiveness:
1+1 au = duel + E d'
(3)
oENN
exp(a(e),lee))
Ouv EV'N. U exp(a(e__lee.))
(4)
In each source domain, the domain server and corresponding users collaboratively train GAT-based federated model. The training process follows the horizontal federated learning (HFL) paradigm in which only the model and gradients exchanged considering intra-domain privacy. We will not detail the horizontal federation model (e.g.. further privacy guarantee and more high-order information) as it is well established FL model and not our novel contribution. This model can be replaced by other GAT-based FL models 34 as well.
3.2.2 Positive knowledge transfer module
After the source domain training, obtain series of source models in individual client's user space. Our positive knowledge transfer module then prepares positive knowledge to be transferred from each source domains D to the target domain D" while protecting inter-domain privacy (CHI). Specifically, suppose an individual user (client) и and source domain DS. we transfer the user u's embedding matrix Xs, R Take the row I of the matrix (i.e., x/y, as example, it is the
user w's embedding output by the I-th message propagation layer (et)). an ideal scenario (i.e., we transfer totally positive knowledge without taking inter-domain privacy into account) (6, embedding matrices from different source domains can directly used enhance target domain local training in client By utilizing the source domain embeddings, u's final target domain embedding e/ of layer is:
= .... XSM ,) L [1,
(5)
where fr(-) is the function that the target domain aggregates the knowledge of the source domains and we will give its final expression in Subsection 3.2.3. In this process, the transfer of knowledge between domains takes place entirely in the user w's local space. Such a fully localized mode of knowledge transfer avoids additional communication overhead and potential privacy issues ( However, this direct embeddings transfer does not meet the privacy and NT constraints in BS-CDR scenarios.
5

---

Privacy-preservinn knowledge extraction In existing CDR frameworks, the user or item embed- ding was shared as knowledge p [5] 6), which neglects inter-domain privacy. In a GNN- approach, such direct transfers are subject to privacy attacks. Each message propagation layer can be viewed as function with user and item embeddings as input. An attacker can easily obtain the user's private rating matrix based on these embeddings. We apply DP to the source domain embeddings Xs, [22 45] to safeguard inter-domain privacy.
THILOREM 1. By introducing Gaussian noise into the source domain embeddings, the reconstructed data from the ideal attack deviates from the actual data, therefore preventing a perfect reconstruction.
In FedGCDR, we incorporate the Gaussian mechanism with the source domain embeddings xs, to obtain &g, for knowledge transfer. Detailed privacy analysis is included in Appendix A.
Feature mapping User features could represent personal preferences and are influenced by domain features. The discrepancy of domains leads to the heterogeneity of feature space between domains which means that source domain embeddings cannot be utilized directly by the target domain. Man et al. 15 show that there exists an underlying mapping relationship between the latent user matrix of different domains, which can be captured by a mapping function. In order to alleviate NT, we adopt series of MLP explore mapping functions for each source domain. Adding Gaussian noise and feature mapping, Equation (5) becomes:
e fr MLP ) MLM...,,MMMMMM-M MLPM-1($P
(6)
To learn more effective mapping function, we adopt mapping loss term:
M M-1
L
4m
x MLP.(x$))11
(7)
1=1
3.2.3 Positive knowledge activation module
After the aforementioned operations, the target domain obtains a list of source domain matrices
S.,..., XS.--- The rows of the matrices represent MLP,(x's,) ). It is worth noting that for has rating, Xs, is Gaussian noise matrix and motivation is: (1) no rating may also suggest a preference; (2) this is beneficial for enhancing the model's 's capability to filter noise and identify NT. With knowledge from the source domains, the purpose of the positive knowledge activation module is to alleviate NT following the knowledge transfer. (CH2). Although we have aligned the feature space the previous module, the Gaussian noise that has been fed to the target domain with source domain embedding matrices leads to potential NT. How to utilize the transferred knowledge remains great challenge.
source domains where
Virtual User
Virtual Social Links
Item Attention
Target Domain User Space
Mary in Movic
Mary
Mary Music
Figure 3: Illustration of target domain graph expansion. The virtual users are constructed with the source domain embeddings from the Movie domain and the Music domain. The attentions generated by social links to the virtual user can be regarded as the domain attentions.
Graph expansion and target domain training To alleviate NT. common approaches are to generate domain attention by predefined domain features [13 ratio of source domains by Writefull 77. These methods are only applicable to limited number of domains and have excessive human intervention. In FedGCDR, we take an attention- approach. First, we expand u's (Mary's) (s) local graph of the target domain shown in Figure
or to control the transfer

---

For the source domain embedding matrices Xs. Xs...., X we represent them as M 1 virtual users. Since the virtual users constructed from source domain embeddings represent the same individual they share correlated preferences, with their features (i.e., embeddings) characterizing w's preferences. Inspired by social recommendation 48
we consider that there is an implicit social relationship between virtual users and the actual user because of the correlation in their preferences. Then, we build virtual social links between them to expand the original target domain graph. Second, by incorporating this expanded graph into target domain training, the GAT model generates corresponding attention coefficients for the virtual users, which can be interpreted as domain-speciff attentions. Leveraging the domain attention coefficients, the target domain can focus on domains that transfer positive knowledge and we can finally give fr()):
49) 50]
M-1
(1 MLL.. )) = Xi + Σ ch +
Σ
(& (8)
vENu
where of is the domain attention of source domain generated by the 1-th layer. Beside, we introduce social regularization term strengthen the virtual social links:
Σ M-1 Sim(x), x x X 11?
i=
1
Σ M-1 Sim((1) (x,, x)s))
the function Sim(-) calculates the cosine similarity
48
Through the graph expansion, achieve: (1) dynamic domain attentions that focus positive source domain knowledge to alleviate NT: (2) attention generation by GAT, eliminating the need for additional interventions such as hyper-parametee tuning feature engineering.
For top-k recommendation, we adopt widely-used inner product model to estimate the value of target domain rating R which is the interaction probability between pair of user and item
R Sigmoid(e)) er);; ue
(10)
where ei and e are the final user and item embeddings output by GAT, Our objective function consists of three terms as follows:
3 2
LGAT BCELoss( R
(11)
2
where and /3 are Writefull, and BCF.Loss(.) is the binary cross-entropy loss (51) The target domain federated GAT training with the expanded graph following the HFL paradigm.
Target model fine-tuning After target domain training with the expanded graph, the target domain GAT model assimilates knowledge from the source domains. However, NT may still be unavoidable. potentially leading the accumulation of negative knowledge in the target domain. An example of this is the Gaussian noise matrices transferred from source domains where the user has no interactions. On the basis of this consideration, we adopt an additional fine-tuning stage: First, freeze the message propagation layers of GAT to isolate the influence of source domains preventing negative information from permeating through the transfer process. Second, we directly train the well-informed embeddings generated by the target domain GAT. Adapting the learned external knowledge through these steps enables more accurate prediction of ratings in the target domain. this process, we use the loss of prediction in Equation (11) as the object function:
Lyt BCE R
u0 R
(12)
We provide computational analysis and communication analysis of FedGCDR in Appendix B.
4 Experiments
4.1 Experimental setup
Datasets
We study the effectiveness of FedGCDR with 16 popular domains a real-world dataset
Amazon [52..
To study the impact of the number of domains model performance, we divide these
7

---

Table I: Statistics the Amazon Dataset. (min-median-max/ values are provided for [Ua], [Tal RRal.
and
Dataset
[4]
[Ga
|7al
|Ral
avg (sparsity)
Amazon-4
|
55,518
6,632
12,626
27,402
53,082
134,438
501,153
623,420
646,266
5,481,801
0.0802%:
Amazon-8 8
99,506
6,632
13,978
27,402
53,082
106,985
501,153
186,016
618,539
5,481,801
0.0399%
Amazon-16
117,672
1036--9000
27,402
17,209
64,624 501,153
41,427 379,657
5,,411, 1,01
0.0928%
Amazon-Dual
2,500
2,500-2,500 2,500
17,889
28,649 39,510
106,741 128,601 150,461
0.1955%
domains into three subsets containing 4, 8, and 16 domains respectively and denote them as Amazon- 4, Amazon-8, and Amazon-16 respectively. We randomly selected 2500 overlapping users in the Books domain and CDs domain to construct the dataset Amazon-Dual to validate the performance of our FedGCDR in the conventional dual-domain scenarios where users full-overlap. The statistics of sub-datasets are shown in Table We filter the original data in different ways, and more details given in Appendix C.1. In experiments, Books and CDs are selected as the target domains. For the ratings in each domain, we first convert them to implicit data, where entries corresponding to existing user-item interactions are marked as and others are marked as O.
Baselines We compare FedGCDR with the following state-of-the-art models: (1) FedGNN 34 is
an attempt to adopt FL graph learning to recommender systems. Its recommendation performance could represent the data quality of the target domain and reflect negative transfer. In Tables 2 and 3 in order to distinguish FedGNN from the CDR baselines, we denote it by Single Domain. (2)
[15] is conventional embedding- mapiing CDR framework. We adjust it to the HFL framework following (6) (3) PriCDR 19 is a
CDR framework, which adopted DP on the rating matrices to ensure privacy. (4) FedCT 6 is VAE-based federated framework that is the first attempt to protect intra-domain privacy in cross-domain recommendations. (5) FedCDR 7 is a dual-target federated CDR framework, where the user embeddings are transferred as knowledge to enhance the other domain's model training. To adapt to the BS-CDR scenarios, we modify FedCDR by applying embedding averaging when receiving source domain embeddings.
We provide implement details in Appendix C.2.
4.2 Recommendation performance
We report the model performance results in Tables 2 and 3 Single domain shows that the Book domain has better single-domain recommendation accuracy than the Music domain, which represents higher data quality and quantity. Under BS-CDR settings, FedGCDR outperforms all CDR baselines on all three sub-datasets, which confirms the effectiveness of the proposed model on real-world data.
To further study our model capacity in alleviating negative transfer, we first define two types of negative transfer: (I) Soft Negative Transfer (SNT), where recommender models' performance under the multi-domain setting is worse than that under the single-domain setting. This means that the knowledge from source domains poisoning the target domain's model training. (2) Hard Negative Transfer (HNT), where recommended performance of a large number of source domains is lower than that of a small number of source domains. This means that the newly added domains are not conducive to the training of the target domain or conflict with the already added source domain.
Taking the Books domain as the target domain, EMCDR, PriCDR, FedCT and FedCDR both have serious negative transfer problems and lower performance on the three data subsets. From the SNT perspective, their performances is much worse than that of Single Domain as shown in Figure 4 From the HNT perspective, their performances under 16-domain settings is worse than that under the 8-domain and 4-domain settings, which suggests it is not appropriate to recklessly transfer knowledge to well-informed domain. Our FedGCDR model successfully alleviates NT with consistently best and stable performance results. For the CDs domain, the performance of the CDR models greatly improves with less NT in Figure X From the SNT perspective, information poor domains have lower probability of negative transfer, as they are inherently less well-trained. From the HNT perspective, on the Amazon-8 dataset, the performance of all models declines, which we attribute to the strong negative knowledge introduced by the four additional domains compared to the 4mazon-4 dataset. On the Amazon- 16 dataset, all methods achieve best performance which indicates
8

---

Table 2: The recommendation performance Amazon @ Books. Single Domain represents FedGNN and its performance is exactly the same on three dub-datasets. FedGCDR-DP is a complete imple- mentation of our method while FedGCDR does not incorporate Gaussian noise. (The best result for the same setting is marked in bold and the second best is underlined. These notes are the same to others.)
Amazon-4@ Books
Amazon-8 Books
Amazon-166e 16@ Books
Model
HR
NDCG@5
HR@I0 NDCO@10
NDCGeS |HR@
NDCG@10
NDCG@5
NDCG@10
Single Domain
0.4693
0.3188
0.6067
0.3634
[0.4693
0.3188
0.6067
0.3634
0.4693
0.3188
0.6067
0.3634
EMCDR
0.4633
0.3075
0.6179
0.3191
0.46678
0.3268
0.5990
0.3518
0.3140
0.2184
0.4207
0.2348
PriCDR
0.4061
0.3159
0.5275
0,3550
0.3196
0.5913
0,3681
0.3699
0.2650
0.4914
0.3042
FodCT
0.2911
0.2044
0.4276
0.2482
0.4665
0.3516
0.6002
0,3939
0.2779
0.2335
0.3580
0.2593
FeUCDR
0.4115
0.3153
0.5415
0.3570
0.4479
0.3538
0.6182
0.3967
0.3926
0.2907
0.5626
0.3403
FedGCDR DP
0.4903
0.3417
0.6717
0.3733
0.5224
0.3608
0.6727
0.3973
0.4928
0.3509
0.6510
0.3742
FedGCDR
0.4941
0.5016
0.3600
0.3854
Table 3: The recommendation performance on Amazon Wns..
Amazon 4@CDs
Amazum &@CDs
Amazon 16@CDs
Model
HR@5
NDCG@5
NDCG@10
NDCG@s HR @
NDCG@
NDCG@5
NDCG@10
Single Domain
0.41119
0.2751
0.5031
0.3040
00.4119
0.2751
0.5031
0.3040
0.41199
0.2751
0.5031
0.3040
EMCDR
0.4074
0.2651
0.5891
0,2972
0.2882
0.1828
0.4361
0.2199
0.4704
0,3683
0.5740
0.3937
PriCDR
0,3987
0.2838
0.5114
0,3202
0.2946
0.1988
0.4229
0,2400
0,4405
0.3689
0.5399
0.4011
FodCT
0,2681
0.1603
0.3774
0.1956
0.1801
0.1282
0.3001
0,1681
0.3522
0.2963
0.4326
0.3219
FeuCDR
0.4299
0.2949
0.5633
0.3381
0.3088
0.2109
0.4620
0,2600
0.4823
0.3983
0.5808
0.4297
FedGCDR DP
0.4159
0,2960
0.5779
0.3520
0.4122
0.2983
0.5064
0.1106
0.4963
0.4061
0.6135
0.4453
FedGCDR
0,4588
0.5819
0.3679
0.3142
0.3464
0.5267
0.4382
0.6208
0.4684
Books
Books
Amazan-
Amaron-1
Amaaned
Figure 4: Illustrations negative transfer on HR @5 and NDCG@S. Metric values lower than single-domain (dotted line and red area) mean severe negative soft negative transfer. The figure on HR 10 and NDCG@ 10 shown in Appendix D.
0.6
0.4
0.5
9.5
8.6
0.3
0.2
0.3
8.4
0.2
62
6.1
[ig110( FedocoR-M
imgr//bonss)
NOCa@5//uula 10Bool))
HRSIAR(Cs)
NDCU@SK<D:)
NDCA@TU(с))
FecGCDR
Fedocon-M FedGLDee- #FFeloco
#FulSCDR FedGCORT FedGCOR
FedGCDR FeRGCORTT FellSCDR
Figure 5: Ablation study on Amazon- 16 CDs and Amazon- 1 16@ Books.
more knowledge from the source domains can improve the model performance in the CDs domain. Overall, the capability of EMCDR, PriCDR and FedCDR to alleviate negative transfer is much higher than that of FedCT. This is because the proportion of target domain features in the final feature guaranteed by tuning Writefull to control the transfer ratio of the source domain. Meanwhile, FedGCDR avoids this kind of human involvement and maintains performance optimality on three sub-datasets. conclusion, our experiments show the superiority of FedCDR in recommendation performance and the effectiveness of alleviating NT.
4.3
Ablation study
To study the contribution of each module of FedGCDR, we implement two model variants, FedGCDR-M and FedGCDR-T. FedGCDR-T transfers the source domain embeddings with-

---

Table Dual-domain CDR performance.
Model
Books - CDs
Books e-
CDs
HR@
NDCG@
HR@ 10
NDCG@ 10
Single Domain
0.2713
0.1429
0.2594
0.1524
EMCDR
0.28166
0,1409
0.2596
0,1540
PrcCDR
0.2903
0.1446
0.2662
0.1583
FedCT
0.2384
0,1239
0,2570
0.1551
FodCDR
0.2566
0.1376
0.2657
0,1554
FeAGCDR-DP
0.3076
0.1552
0.2749
0.1602
FedGCDR
0.3323
0,1838
0.2958
0.1797
out mapping. FedGCDR-M replaces the attention graph expansion with the average sum of source domain embeddings and omits the fine-tuning stage. We experiment with Books and CDs as target domains on the Amazon-16 16 dataset. The experimental results are shown in Figure We make the following observations: (1) The two variants perform differently on different target domains. On the Books domain, FedGCDR-T performs better than FedGCDR-M, which indicates that for domains with higher data quality, preventing the transfer of negative knowledge from other domains is more important than mapping this knowledge better (in other words, the quality of external information holds greater significance than its quantity), and the Positive Knowledge Activation module meets the requirements of such domains. On the CDs domain, FedGCDR-M performs better than FedGCDR. T, which indicates that for domains that are deficient in information, mapping knowledge correctly is more important than preventing inter-domain negative knowledge (in other words, the quantity of external information holds greater significance than its quality), j. and the Positive Knowledge Transfer module meets these requirements. (2) Compared FedGCDR, the absence of either module can cause a significant drop in performance. This indicates that in cross-domain recommendation. we should not only focus on transferring positive knowledge, but also control the spread of negative knowledge to the target domain, especially when a large number of domains.
4.4 Dual-domain scenario
According the experimental results shown in Table our FedGCDR achieved the best experimental metrics in both knowledge transfer directions. This shows that our approach is also suitable for dual-domain scenarios where users full-overlap and have only single source domain and a single target domain.
We provide experimental results on privacy budget in Appendix D.2.
5 Limitations
Our experiments were conducted on 16 domains of the Amazon dataset. While this extensive dataset covers broader source domains, relying on single dataset may limit the generalizability of our model data from other sources. Our approach uses overlapping users as a cross-domain bridge. Indeed, there are no widely-recognized cross-domain recommendation datasets with more than three domains, aside from the Amazon dataset. Despite this limitation, we believe that the improvements in privacy preservation and model performance demonstrated by FedGCDR underscore its superiority.
6 Conclusion
We proposed FedGCDR, federated graph learning framework designed for BS-CDR, FedGCDR addresses the critical challenge of privacy preservation and negative transfer by employing a positive knowledge transfer module and a positive knowledge activation module. Our method achieves best recommendation quality results 16 domains of the Amazon dataset. In the future, aim to extend FedGCDR to improve the recommendation performance of both the target and the source domains.
Acknowledgment
The research was supported by Natural Science Foundation of China (62272403).
10

---

References
[1] Weiming Liu, Jiajie Su, Chaochao Chen, and Xiaolin Zheng. Leveraging distribution alignment via stein path for cross-domain cold-start recommendation. Advances in Neural Information Processing Systems, 34:19223-113 19234, 2021.
[2] Tianzi Zang, Yanmin Zhu, Haobing Liu, Ruohan Zhang, and Jiadi Yu. A survey on cross- domain recommendation: taxonomies, methods, and future directions. ACM Transactions on Information Systems, 41(2):1-39, 2022.
[3] Feng Zhu, Yan Wang, Chaochao Chen, Jun Zhou, Longfei Li, and Guanfeng Liu. Cross-domain recommendation: challenges, progress, and prospects. arXiv preprint arXiv:2103.01696 2021.
[4] Meng Liu, Jianjun Li, Guohui Li, and Peng Pan. Cross domain recommendation via bi- directional transfer graph collaborative filtering networks. In Proceedings of the 29th ACM international conference on information & knowledge munagement, pages 885-894, 2020.
[5] Jiangxia Cao, Jiawei Sheng, Xin Cong. Tingwen Liu, and Bin Wang. Cross-domain recommen- dation to cold-start users via variational information bottleneck. In 2022 IEEE 38th International Conference on Data Engineering, pages 2209-2223, IEEE, 2022.
[6] Shuchang Liu, Shuyuan Xu, Wenhui Yu, Zuohui Fu, Yongfeng Zhang, and Amelie Marian. Fedct: Federated collaborative transfer for recommendation. In Proceedings of the 44th International ACM SIGIR Conference on Research and Development in Information Retrieval, pages 716-725, 2021.
[7] Wu Meihan, Li Li, Chang Tao, Eric Rigall, Wang Xiaodong, and Xu Cheng-Zhong Fededr: federated cross-domain recommendation for privacy-preserve rating prediction. In Proceed- ings of the 31st ACM International Conference on Information & Knowledge Management. pages 2179-21111 2188, 2022.
[8] Zhiwei Liu, liangwei Yang, Ziwei Fan, Hao Peng, and Philip S Yu. Federated social recommen- dation with graph neural network. ACM Transactions on Intelligent Systems and Technology (TIST), 13(4):1-24, 2022.
[9] Gaode Chen, Xinghua Zhang, Yijun Su, Yantong Lai, Ji Xiang, Junbo Zhang, and Yu Zheng. Win-win: a dation. In Proceedings of the AAAI Conference on Artificial Intelligence, volume 37, pages 4149 4156, 2023.
federated framework for dual-target cross-domain recommen-
[10] Karl Weiss, Taghi M Khoshgoftaar, and DingDing Wang. A survey of transfer learning. Journal of Big Data, 3:1-40, 2016
[11] Nidhi Agarwal, Akanksha Sondhi, Khyati Chopra, and Ghanapriya Singh. Transfer learning: Survey and classification. Smart Innovations in Communication and Computational Sciences 2020, pages 145-155, 2021.
[12] Wen Zhang, Lingfei Deng, Lei Zhang, and Dongrui Wu. A survey on negative transfer. IEEE/CAA Journul of Aulomatica Sinica, (012):355329, 2022.
[13] Hongwei Zhang, Xiangwei Kong, and Yujia Zhang. Selective knowledge transfer for cross- domain collaborative recommendation. JEEE Access, 0448039-40551 2021.
[14] Xu Yu, Dingjia Zhan, Lei Liu, Hongwu Lv, Lingwei Xu, and Junwei Du A privacy-pres preserving cross- cross-domain healthcare wearables recommendation algorithm based domain-dependent and domain-independent feature fusion. IEEE Journal of Biomedical and Health Informatics, 26(5):1928-1936 2021.
[15] Tong Man, Huawei Shen, Xiaolong Jin, and Xueqi Cheng. Cross-domain recommendation: An embedding and mapping approach. In IJCAI, volume 17, pages 2464-2470 2017.
[16] Zhen Liu, Jingyu Tian, Lingxi Zhao, and Yanling Zhang. Attetivv-feature transfer based on mapping for cross-domain recommendation. In 2020 International Conference on Data Mining Workshops (ICDMW), pages 151-158. IEEE, 2020.

---

[17] Huan Yan, Xiangning Chen, Chen Gao, Yong Li, and Depeng Jin. Deepapf: Deep attentive probabilistic factorization for multi-site video recommendation. TC, 2(130)( 2019.
[18] Xiaoyun Zhao, Ning Yang, and Philip S Yu. multi-sparse-domail collaborative recommendation via enhanced comprehensive aspect preference learning. In Proceedings of the Fifteenth ACM International Conference Web Search and Data Mining, pages 1452-1460, 2022.
[19] Chaochao Chen, Huiwen Wu, Jiajie Su, Lingjuan Lyu, Xiaolin Zheng, and Li Wang. Differ- ential private knowledge transfer for privacy- parreciirreriiinggggg cross-domain recommendation. In Proceedings of the ACM Web Conference 2022, pages 1455-1465, 2022.
[20] Xinting Liao, Weiming Liu, Xiaolin Zheng, Binhui Yao, and Chaochao Chen. Ppgencdr: A stable and robust framework for privacy-preservin cross-domain recommendation. In Proceedings of the AAAI Conference on Artificial Intelligence, volume 37, pages 4453-4461, 2023.
[21] Zhongxuan Han, Xiaolin Zheng, Chaochao Chen, Wenjie Cheng, and Yang Yao. Intra and inter domain hypergraph convolutional network for cross-domain recommendation. In Proceedings of the ACM Web Conference 2023, pages 449-459, 2023.
[22] Cynthia Dwork, Aaron Roth, et The algorithmic foundations of differential privacy. Founda- lions and Trends@ in Theoretical Computer Science, 93-44)211-4077 2014.
[23] Bin Li, Qiang Yang, and Xiangyang Xue. Can movies and books collaborate? cross domminn collaborative filtering for sparsity reduction. In Twenty-First International Joint Conference on Artificial Intelligence, 2009.
[24] Ali Mamdouh Elkahky, Yang Song, and Xiaodong He. A multi-view deep learning approach for cross domain user modeling in recommendation systems. In Proceedings of the 24th International Conference on World Wide Web, pages 278-288, 2015.
[25] Weiming Liu, Xiaolin Zheng, Mengling Hu, and Chaochao Chen. Collaborative filtering with attribution alignment for review-based non-overlapped cross domain recommendation. In Proceedings of the ACM Web Conference 2022, pages 1181-1190 2022.
[26] Weiming Liu, Chaochao Chen, Xinting Liao, Mengling Hu, Yanchao Tan, Fan Wang, Xiaolin Zheng, and Yew Soon Ong. Learning accurate and bidirectional transformation via dynamic embedding transportation for cross-domain recommendation. In Proceedings of the AAAI Conference on Artificial Intelligence, number 8, pages 8815 5823,, 2024.
[27] Weiming Liu, Xiaolin Zheng, Chaochao Chen, Mengling Hu, Xinting Liao, Fan Wang, Yanchao Tan, Dan Meng, and Jun Wang. Differentially private sparse mapping for cross domain recommendationn. In Proceedings of the 31st ACM International Conference Multimedia, pages 6243-6252, 2023.
[28] Brendan McMahan, Eider Moore, Daniel Ramage, Seth Hampson, and Blaise Aguera y Arcas. Communication-cfien learning of deep networks from decentralized data. In Artificial Intelligence and Statistics, pages 1273-1282. PMLR, 2017.
[29] Sai Praneeth Karimireddy, Satyen Kale, Mehryar Mohri, Sashank Reddi, Sebastian Stich, and Ananda Theertha Suresh. Scaffold: Stochastic controlled averaging for federated learning. In International Conference on Machine Learning, pages 5132-5143. PMLR, 2020.
[30] Zheng Wang, Xiaoliang Fan, Jianzhong Qi, Chenglu Wen, Cheng Wang, and Rongshan Yu. Federated learning with fair averaging. In Zhi-Hua Zhou, editor, Proceedings of the Thir- lieth International Joint Conference on Artificial Intelligence, IJCAI-21, 1, pages 1615-1623, International Joint Conferences on Artificial Intelligence Organization, 8 2021. Main Track.
[31] Tian Li, Anit Kumar Sahu, Manzil Zaheer, Maziar Sanjabi, Ameet Talwalkar, and Virginia Smith. Federated optimization in heterogeneous networks. Proceedings of Machine Learning and Systems, 2:429 4500, 2020.
12

---

[32] Peter Kairouz, H Brendan McMahan, Brendan Avent, Aurélien Bellet, Mehdi Bennis, Ar- jun Nitin Bhagoji. Kallista Bonawitz, Zachary Charles, Graham Cormode, Rachel Cummings. et al. Advances and open problems in federated learning. Foundations and trends in machine learning, 14(1-2):1-210) 2021.
[33] Di Chai, Leye Wang, Kai Chen, and Qiang Yang. Secure federated matrix factorization. IEEE Intelligent Systems, 36(5):1 11-2), 2020.
[34] Chuhan Wu, Fangzhao Wu, Yang Cao, Yongfeng Huang, and Xing Xie. Fedgnn: Federated graph neural network for prrecc-p recommendation, arXiv preprint arXiv22102.04955, 2021.
[35] Peihua Mai and Yan Pang. Vertical federated graph neural network for recommender system. In International Conference on Machine Learning, pages 23516-23535 PMLR, 2023.
[36] Weiming Liu, Chaochao Chen, Xinting Liao, Mengling Hu, Jianwei Yin, Yanchao Tan, and Longfei Zheng. Federated probabilistic preference distribution modelling with compactness co-clustering for siwacy-preserving multi-domain recommendation. In Proceedings of the 32rd International Joint Conference on Artificial Intelligence, pages 2206-2214 2023.
[37] Zonghan Wu, Shirui Pan, Fengwen Chen, Guodong Long, Chengqi Zhang, and Yu Philip. comprehensive survey on graph neural networks. IEEE transactions on neural networks and learning systems, 32(1):4 24, 2020.
[38] Petar Veličković, Guillem Cucurull, Arantxa Casanova, Adriana Romero, Pietro Lio, and Yoshua Bengio. Graph attention networks. arXiv preprint 1710. 10903, 2017.
[39] Shiwen Wu, Fei Sun, Wentao Zhang, Xu Xie, and Bin Cui. Graph neural networks in recom- mender systems: a survey. ACM Computing Surveys, 55(5):1-37, 2022.
[40] Chen Gao, Xiang Wang, Xiangnan He, and Yong Li. Graph neural networks for recommender system. In Proceedings of the Fifteenth ACM International Conference on Web Search and Data Mining, pages 1625, 2022.
[41] Teng Xiao, Zhengyu Chen, Donglin Wang, and Suhang Wang. Learning how to propagate messages in graph neural networks. In Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining, pages 1894-1903, 2021.
[42] Yifei Zhang, Hao Zhu, Zixing Song, Piotr Koniusz, Irwin King, et al. Mitigating the popularity bias of graph collaborative filtering: A dimensional collapse perspective. Advances Neural Information Processing Systems, 36:67533-67550, 2023.
[43] Xiangnan He, Kuan Deng, Xiang Wang, Yan Li, Yongdong Zhang, and Meng Wang. Lightgnn: Simplifying and powering graph convolution network for recommendation. In Proceedings of the 43rd International ACM SIGIR conference on research and development Information Retrieval, pages 639-648, 2020.
[44] Chuhan Wu, Fangzhao Wu, Lingjuan Lyu, Tao Qi, Yongfeng Huang, and Xing Xie. federated graph neural network framework for privacy-preserving personalization. Nature Communica- lions, 13(1):3091, 2022.
[45] Martin Abadi, Andy Chu, Ian Goodfellow, H Brendan McMahan, Ilya Mironov, Kunal Talwar, and Li Zhang. Deep learning with differential privacy. Proceedings of the 2016 ACM SIGSAC conference computer and communications security, pages 308-318, 2016
[46] Arthur Gretton, Karsten M Borgwardt, Malte J Rasch, Bernhard Schölkopf, and Alexander Smola. A kernel two-sample test. The Journal of Machine Learning Research, 13(1):723-77, 2012.
[47] Zirui Wang and Jaime Carbonell. Towards more reliable transfer learning. In Machine Learning and Knowledge Discovery in Databases: European Conference, ECML PKDD 2018, Dublin, Ireland, September 10-14, 2018, Proceedings, Part Il 18, pages 794-810. Springer, 2019.
13

---

[48] Hao Ma, Dengyong Zhou, Chao Liu, Michael R Lyu, and Irwin King. Recommender systems with social regularization. In Proceedings of the fourth ACM International Conference Web Search and Data Mining, pages 287-296, 2011.
[49] Chaochao Chen, Liang Li, Bingzhe Wu, Cheng Hong, Li Wang, and Jun Zhou. Secure social recommendation based on secret sharing. arXiv preprint arXiv:2002.0200 2020.
[50] Suman Deb Roy, Tao Mei, Wenjun Zeng, and Shipeng Li. Socialtransfer: cross- doms-n transfer learning from social streams for media applications. In Proceedings of the 20th ACM international conference on Multimedia, pages 649-658, 2012.
[51] Xiangnan He. Lizi Liao, Hanwang Zhang, Liqiang Nie, Xia Hu, and Tat-Seng Chua. Neural collaborative filtering. In Proceedings of the 26th International Conference on World Wide Web, pages 173-182, 2017.
[52] Jianmo Ni, Jiacheng Li, and Julian McAuley. Justifying recommendations using distantly- labeled reviews and fine-grat ane-ggained aspects. In Proceedings of the 2019 conference on empirical methods in natural language processing and the 9th International Joint Conference Natural Language Processing (EMNLP-IJCNLP)) pages 188-197, 2019.
[53] Shuowei Cai and Hao Liu. Hstfl: A heterogencous federated learning framework for misaligned spatiotemporal forecasting. arXiv preprint arXiv:2409. 8482, 2024.
[54] Xinjian Luo, Yuncheng Wu, Xiaokui Xiao, and Beng Chin Ooi. Feature inference attack model predictions in vertical federated learning. In 202/ IEEE 37th International Conference on Data Engineering, pages 181-192. IEEE, 2021.
[55] Kalervo Järvelin and Jaana Kekäläinen. Cumulated gain- based evaluation of ir techniques. ACM Transuctions on Information Systems, 20(4):422-444, 2002.
14

---

For the target domain, the embeddings received form source domains can be regarded as the functional result of their models. Let the function be f(---) and the input eur By the user embedding and item embedding respectively. The embeddings is the output f(e, ev). The target domain attempts to find A Privacy analysis
Due to the algorithmic nature of GNN, the source domain embeddings we pass are a function result on the user embeddings and item embeddings. This means that in the event of a successful inference attack, our user item interaction matrix exposed to the threat of privacy disclosure. We apply differential privacy (DP) to further safeguard embeddings, following the approach of Cai et al. [53
Threat model In this paper, we assume the threat model to semi-honest (honest-but-curiont Under this threat model, the participants adhere strictly the FL protocol for collaborative model training. However, they are interested in the sensitive rating data and may attempt to extract as much information possible from the transferred embeddings. Specifically, these semi-honee parties, ie. the target domain, may employ inference attacks [54] on the embeddings to reconstruct or infer sensitive user-item interaction matrix of other domains.
DEFINITION (THE GAUSSIAN MECHANISM). Given a function f D - IRd over a dataset D, the Gaussian mechanism is defined as:
Felz,f()cC f(z) + (ri....Tk)
(13)
22mm(122555 In FedGCDR,
where r; the random noise drawn from N (0, (0.02 22 and a the intra-domain GAT-based federated model is considered the function f().
THEOREM 2. The Gaussian mechanism defined in Definition preserves (e, 8DP for each publica- tion step 122V.
First, give the definition of the inverse function:
DEFINITION (INVERSE FUNCTION). Given a function f - RRd over datasel D, the inverse
function f-1 is defined as:
/ argming
Σ
|| l - g(S(eu, ex)) ll2,
(14)
iEu
where
eu. e. E-Ebedding(g)) E D.
(15)
a inference attack function I(-) which is as close to the inverse function as possible.
DEFINITION 3 (PRIVACY LEAKAGE), Given function f E - I&d over Embedding set E and an inference function the privacy leakage A is defined as:
A
(16)
+ [0]
Leak, + M Σ Leak,
where
Leakn. = e; - Ia(S(en, ex)) 1|,, EU,
(17)
Leak, = =| e; - Lo(fee, ex)) Il2.j E V.
(18)
6 T(S(es ev)) 2/2 reflects the closeness of the reconstructed input to the true input. Therefore, privacy Ieakage (PLeak) A is able reflect privacy leakage of FedGCDR with the inference function I(.). PLeak equal to I means perfect reconstruction, and being close to zero means bad recon- struction. DP on the embeddings further ensures that attackers cannot perfectly reconstruct the raw data.
THEOREM 2. If PLeak equals I with the inference function I(-), the function f(..)) is bijection.
Proof. the function [(.,) is not bijection, there are i,j E D and + j. but f(e e = s e and (e S ei)) and [e] eg)). This is a contradiction as the perfect reconstruction requires both e e ([fee),))) and el e/ = T(f(e), e()) to achieve A Therefore, the function ((.))
must be bijection.
15

---

THEOREM 3. Given the lipschiz constant L of the function f at z E D with the noise generated by Gaussian mechanism N on embeddings. If f(e.. e.) + N E f. the distance between x to the reconstructed data of the attack I(.) which achieves A = is bounded by I.
WV
Proof. By Theorem 2, we have for D and v af. f.I(f(e.. From the Lipschitz continuous,
(Cu: Co) and f(((u)
le- - [(f(eu. e.)) +NNI [f(ew, e.) (f(e ev) +N M
(19)
Therefore, by perturbing the source domain embedding with Gaussian mechanism, the reconstructed data of the ideal attack deviates from the real data and prevents a perfect reconstruction (i.e., A 1).
B
Cost analysis
Due to the complexity of the FedGCDR pipeline, we perform a theoretical analysis of the computa- tional and communication cost of FedGCDR accordance with the HVH pipeline including horizontal source domain training, vertical positive knowledge transfer module and horizontal positive knowl- edge activation module.
B.1
Computational cost
Given a GAT model, let V be the number of nodes, E be the number of edges, and F the embedding size. The computational cost of one propagation layer of classic GAT framework is O(V FFFF'' + FFF 38]. In the horizontal source domain training, our model is simplified GAT variants which discard feature transformation and non-linear activation. For a N layer model, the simplified computational cost is O EF). In the vertical positive knowledge transfer module, space mapping is carried by Nm layers' MLP with computational cost O(Nm F2). In the horizontal positive knowledge activation module, the first part is the simplified GAT model and the second part is the fine-tuning model with computational cost (F²)). In conclusion, for the FedCDR framework with N domains, Tc GAT-based federated model training epochs, and T fine-tuning epochs, the total computational cost is O (NP N EF + No F2) computational cost N(TGNPNK EF TF)2).
} + TF F2)). Cause N p2 & N N EF, we get the final
B.2 Communication cost
In FedGCDR, the global model and item embeddings are held by the domain server. Let I be the number of items and F be the embedding size. The space complexity of global model and item embeddings are O(F) and ((FF) respectively. In the horizontal source domain training, the domain server distributes the global model and item embeddings and get the gradient with the same size. The communication cost O(F + IF). In the vertical positive knowledge transfer module, the N layers' MLP and its gradients are transmitted with the communication cost O(N F²). In the horizontal positive knowledge activation module, the target domain additionally perform a fine-tuning stage with communication cost FIF... In conclusion, for the FedCDR framework with N users, TC federated model training epochs, and F fine-tune fine-tuning epochs, the total communication cost is O(T N"NN" "N""F" F2 IFF IF) Cause N F + < IF, we get IFNCIF(TC... +F(TT+TT))) According to the expression, the communication cost of our FedGCDR is basically equivalent to the cost of two HFL progress. The cost reduced because knowledge transfer totally takes place in user space, thus avoiding large-scale information exchange.
C Experimental details
C.1 Dataset details
The Amazon dataset we used is the 2018 version and can be easily accessed in htttttss//ssseeii ucsd.edu/ edu/ http://aaaaallleaaatttttsssaaaaa amaz/o/manoonn/aa v_/ The basis of our domain selection strategy the amount of data before performing data filtering. Thus, we sorted the domains contained in the Amazon dataset based on the amount of data in descending order and selected the top 16 domains. Similarly, the Amazon-4 and Amazon-8 datasets were selected accordingly. The only exception is
16

---

that we prioritized the Movie domain, which has relatively small amount of source data, based on popularity. In addition multi-domain experiments, we randomly selected 2500 overlapping users in the Books domain and CDs domain to construct the dataset Amazon-Duma so as to validate the performance of our FedGCDR in the conventional dual-domain scenarios where users full-overlap. The processing details are shown in T The bottleneck time of FedGCDR is the federated-GATT training time in each domain, and we also show in Table
Table 5: Processing details on Amazon Dataset.
|0]
[/]
cure
cure
time per epoch (mimas))
Clothing, Shoes and Jowelry
11,558
197.677
10
03:31
Books
27.402
501,153
10
11:02
CDs and Vingl
13,094
71,199
24
10
04:02
Amazon
Movies
53,082
Home and Kitchen
15,772
135,182
48
10
04:36
Electronics
16,836
120,876
32
10
04:40
Sports and Outdoars
14,262
93,095
32
10
03:41
Cell Phones and Accessories
55,312
Tools and Home Improvement
9,899
65.378
16
10
02:47
Toys and Games
5,267
63,870
32
10
01:10
Automotive
6,135
62,188
32
10
01:32
Supplies
31,853
Kindle Store
8,756
82,874
48
10
02:06
Amazon-
Products
1,266
17,209
Patio, Lawn and Garden
1,036
17,605
32
10
00:16
Grocery and Gourmet Food
3,415
36,292
10
00:50
C.2 Implement details
We provide the implemented details of our proposed model and baselines. We batch size 256 and latent dim 8 for all domains. The number of propagation layer of GAT-base federated model set 2. The MI.P has two hidden layers with size=(16, 4). Connsidering the trade-off between recommendation performance and privacy preservation, we set to 8 and a to 10-5, We set a=0.01 and 330.01 which are the two Writefull of the objective function LGAT() When training our models, choose Adam the optimizer, and set the learning rate to 0.01 both in GAT-based federated model training and the fine-tuning stage. To evaluate the recommendation performance, we use the leave-one-out method which is widely used in recommender systems [51]. Specifically, we held out the latest interaction as the test set and utilized the remaining data for training. Then, we follow the common strategy which randomly samples 99 negative items that are not interacted with by the user for the rank list generation of the test set. We consider the top-k recommendation task as choose metrics including Hit Ratio (HR) @ K score and the Normalized
the main experiment Discounted Cumulative Gain (NDCG) @ K (55] of the top-K ranked items with K=5, 10. We conduct the experiments three groups of random seeds and report the average results. We conduct all the experiments on NVIDIA 3090 GPUs.
D
Additional experimental results
D.1 Neagtive transfer on HR 10 and NDCG@10
Books
Books
CDs DXD
CDs
1400
INOTE
Amazni
Amarndd
Mosond
Figure Illustrations of negative transfer on HR 10 and NDCG@10 10
For HR @ and NDCG@ 10 in Figure 6 our method and baselines show similar trends to the
previous HR @5 and NDCG@5. Compared to Figure 6, the slight difference is that FedCT's HR @ 10
17

---

performance is better on Amazon-&@CDs than Amazon-4@CDs We believe that the reason is the poor performance of FedCT on Amzon-4G6 CDs lowers the threshold for negative transfer of the newly added source domain.
D.2 Privacy budget
0.65
0.46
0.6
NBCC
0.38
HR
NDCG@5
HR@10
NDCG@10
0.4
0.34
16
32
64
16
32
64
Figure The effect of DP on model performance.
To study the effects of privacy budget
the model performance, vary the privacy budget <= {4,8 8, 16, 32, 643 to affect the a. We experimented on the Amazon- 16 with CDs as the target domain and fix 8 10-5. We report the results Figure From that model's performance decreases as decreases. The degradation in model performance suggests that approach struggles counteract the effects of high-intensity noise large number of domains, but the model performance is not completely destroyed by Gaussian noise. Thus, there trade-off between accuracy and privacy, where smaller value adds more noise embeddings for stronger privacy preservation but leads to more prediction eтror. Therefore, to balance the data privacy preservation capacity and the model performance, we
observe that the
E Broader impacts
Our proposed FedGCDR is tailored for BS-CDR, focusing on the privacy and negative transfer problems. CDR widely uesd, while BS-CDR is generic and close to the reality. Our approach can better mine user preferences and effectively protect privacy. On the one hand, users will benefit from more accurate recommendations and thus have a better experience in shopping, watching movies, etc. On the other hand, various economic entities can gain more profits.
18

---

NeurIPS Paper Checklist
1. Claims
Question: Do the main claims made in the abstract and introduction accurately reflect the paper's contributions and scope?
Answer: [Yes]
Justification:
We have claimed the contributions and scope in lines 5-7 and 69-75.
Guidelines:
The answer NA means that the abstract and introduction do not include the claims made in the paper.
The abstract and/or introduction should clearly state the claims made, including the contributions made in the paper and important assumptions and limitations. A No or
NA answer to this question will not perceived well by the reviewers.
The claims made should match theoretical and experimental results, and reflect how much the results
be expected to generalize other settings.
is fine to include aspirational goals as motivation as long is clear that these goals are not attained by the paper.
2. Limitations
Question: Does the paper discuss the limitations of the work performed by the authors?
Answer: [Yes]
Justification:
We have discussed the limitations in lines 318-325.
Guidelines:
The answer NA means that the paper has no limitation while the answer No means that the paper has limitations, but those not discussed in the paper.
The authors are encouraged to create separate "Limitations" section in their paper.
The paper should point out any strong assumptions and how robust the results are to violations of these assumptions (e.g., independence assumptions, noiseless settings, model well-specification. asymptotic approximations only holding locally). The authors should reflect how these assumptions might be violated in practice and what the implications would be.
The authors should reflect on the scope of the claims made, e.g., if the approach was only tested on few datasets or with few runs. In general, empirical results often depend on implicit assumptions, which should be articulated.
The authors should reflect the factors that influence the performance of the approach. For example, facial recognition algorithm may perform poorly when image resolution low images are taken in low lighting. Or speech-to-text system might be used reliably to provide closed captions for online lectures because it fails to handle technical jargon.
The authors should discuss the computational efficiency of the proposed algorithms and how they scale with dataset size.
If applicable, the authors should discuss possible limitations of their approach address problems of privacy and faimess.
While the authors might fear that complete honesty about limitations might be used by reviewers as grounds for rejection, a worse outcome might be that reviewers discover limitations that aren't 't acknowledged in the paper. The authors should use their best judgment and recognize that individual actions in favor of transparency play an impor- tant role in developing norms that preserve the integrity of the community. Reviewers will be specifically instructed to not penalize honesty concerning limitations.
3. Theory Assumptions and Proofs
Question:
For each theoretical result, does the paper provide the full set of assumptions and complete (and correct) proof?
Answer: [Yes]
19

---

Justification:
We have given the full set of assumptions and proof in Appendices A and B.
Guidelines:
The answer NA means that the paper does not include theoretical results. All the theorems, formulas, and proofs in the paper should be numbered and cross- referenced.
All assumptions should be clearly stated or referenced the statement of any theorems.
The proofs can either appear the main paper or the supplemental material, but they appear in the supplemental material, the authors are encouraged to provide short proof sketch to provide intuition.
Inversely, any informal proof provided in the core of the paper should be complemented by formal proofs provided in appendix supplemental material.
Theorems and Lemmas that the proof relies upon should be properly referenced.
4. Experimental Result Reproducibility
Does the paper fully disclose all the information needed to reproduce the main ex- perimental results of the paper to the extent that it affects the main claims and/or conclusions of the paper (regardless of whether the code and data are provided or not)?
Question:
Answer: [Yes]
Justification: We have provided experimental setup section 4 and more experimental details in Appendix C.
Guidelines:
The answer NA means that the paper does not include experiments.
If the paper includes experiments, No answer to this question will not be perceived well by the reviewers: Making the paper reproducible is important, regardless of whether the code and data are provided or not.
If the contribution is dataset and/or model, the authors should describe the steps taken to make their results reproducible or verifiable.
Depending on the contribution, reproducibility can be accomplished in various ways. For example, if the contribution is novel architecture, describing the architecture fully might suffice, or if the contribution is a specific model and empirical evaluation, it may be necessary to either make possible for others to replicate the model with the same dataset, or provide access to the model. In general. releasing code and data is often one good way accomplish this, but reproducibility can also be provided via detailed instructions for how to replicate the results, access to a hosted model (e.g.. in the case of large language model), releasing of a model checkpoint, or other means that are appropriate to the research performed.
While NeurIPS does not require releasing code, the conference does require all submis- sions to provide some reasonable avenue for reproducibility, which may depend on the nature of the contribution. For example
(a) If the contribution is primarily a new algorithm, the paper should make it clear how reproduce that algorithm. (b) If the contribution is primarily
model architecture, the paper should describe the architecture clearly and fully.
(c) If the contribution is a new model (e.g., a large language model), then there should either be way to access this model for reproducing the results or way to reproduce the model (e.g., with an open-source dataset or instructions for how to construct the dataset).
(d) We recognize that reproducibility may be tricky in some cases, in which case authors are welcome deseribe the particular way they provide for reproducibility, In the case of closed-source models, it may be that access to the model is limited in some way (e.g., registered users), but it should be possible for other researchers to have some path to reproducing or verifying the results.
5. Open access to data and code
Question: Does the paper provide open access to the data and code, with sufficient instruc- tions to faithfully reproduce the main experimental results, as described in supplemental material?
20

---

Answer: [Yes]
Justification: We provide the code in supplemental material. For datasets, we provide the data processing code and the public benchmark is easy access via the link in code file.
Guidelines:
The answer NA means that paper does not include experiments requiring code.
Please see the NeurlPS code and data submission guidelines (https://nips cc/
for more details.
While we encourage the release of code and data, we understand that this might not be possible, so "No" is an acceptable answer. Papers cannot be rejected simply for not including code, unless this is central to the contribution (e.g., for new open-source benchmark).
The instructions should contain the exact command and environment needed to to reproduce the results. See the NeurIPS code and data submission guidelines (https
wtt.ggiddde/eeeSSuunrrnn ssionpolicy) for more details. hetpolliicggiddeeCooooooe
The authors should provide instructions on data access and preparation, including how to access the raw data, preprocessed data, intermediate data, and generated data, etc.
The authors should provide scripts to reproduce all experimental results for the new proposed method and baselines. only subset of experiments are reproducible, they should state which ones are omitted from the script and why.
At submission time, preserve anonymity, the authors should release anonymized versions (if applicable).
Providing as much information as possible in supplemental material (appended to the paper) recommended, but including URLs to data and code permitted.
6. Experimental Setting/Details
Question: Does the paper specify all the training and test details (e.g., data splits, hyper- parameters, how they were chosen, type of optimizer, etc.) necessary to understand the results?
Answer: [Yes]
Justification: We have provided implement details in Appendix C.2 which contains data splits, hyper-parameters, type of optimizer, etc.
Guidelines:
The answer NA means that the paper does not include experiments.
The experimental setting should be presented in the core the paper to a level of detail that is necessary to appreciate the results and make sense of them.
The full details can be provided either with the code, appendix, as supplemental material.
7. Experiment Statistical Significance
Does the paper report error bars suitably and correctly defined or other appropriate information about the statistical significance of the experiments?
Question:
Answer:
[Yes]
Justification: Our reported results are averaged over runs with different random seeds.
Guidelines:
The answer NA means that the paper does not include experiments.
The authors should answer "Yes" if the results are accompanied by error bars, confi- dence intervals, or statistical significance tests, at least for the experiments that support the main claims of the paper.
The factors of variability that the error bars capturing should be clearly stated (for example, train/test split, initialization, random drawing of some parameter, or overall with given experimental conditions).
The method for calculating the error bars should be explained (closed form formula, call to a library function, bootstrap, etc.)
The assumptions made should be given (e.g., Normally distributed errors).
21

---

It should be clear whether the error bar is the standard deviation or the standard error of the mean.
is OK to report 1-sigma error bars, but one should state it. The authors should preferably report a 2-sigma error bar than state that they have 96% CI, if the hypothesis of Normality of errors is not verified.
For asymmetric distributions, the authors should be careful not to show in tables or figures symmetric error bars that would yield results that are out range (e.g. negative enror rates).
If error bars reported in tables plots, The authors should explain in the text how they were calculated and reference the corresponding figures or tables in the text.
8. Experiments Compute Resources
For each experiment, does the paper provide sufficient information on the com- puter resources (type of compute workers, memory, time of execution) needed reproduce the experiments?
Question:
Answer: [Yes]
Justification:
We have provided information the computer resources in Appendices C.
Guidelines:
The answer NA means that the paper does not include experiments.
The paper should indicate the type of compute workers CPU or GPU, internal cluster, or cloud provider, including relevant memory and storage.
The paper should provide the amount compute required for each of the individual experimental runs well estimate the total compute.
The paper should disclose whether the full research project required more compute than the experiments reported in the paper (e.g., preliminary failed experiments that didn't make into the paper).
9. Code Of Ethics
Question: Does the research conducted the paper conform, in every respect, with the NeurlPS Code of Ethics httppp/pp.//.peee..cc//opp/////a
Answer:
answerYes
Justification:
We have fully reviewed the NeurIPS Code of Ethics.
Guidelines:
The answer NA means that the authors have not reviewed the NeurIPS Code of Ethics.
If the authors answer No, they should explain the special circumstances that require deviation from the Code of Ethics.
The authors should make sure to preserve anonymity (e.g., there a special consid- eration due to laws or regulations in their jurisdiction).
10. Broader Impacts
Question: Does the paper discuss both potential positive societal impacts and negative societal impacts of the work performed?
Answer: [Yes]
Justification: have discussed social impacts Appendix
Guidelines:
The answer NA means that there no societal impact of the work performed.
If the authors answer NA or No, they should explain why their work has no societal impact why the paper does not address societal impact.
Examples of negative societal impacts include potential malicious or unintended uses (e.g., disinformation, generating fake profiles, surveillance), fairness considerations (e.g., deployment of technologies that could make decisions that unfairly impact specific groups), privacy considerations, and security considerations.
22

---

The conference expects that many papers will be foundational research and not tied to particular applications, let alone deployments. However, if there is direct path to any negative applications, the authors should point it out. For example, it is legitimate to point out that an improvement in the quality of generative models could be used to generate deepfakes for disinformation. On the other hand, it is not needed to point out that a generic algorithm for optimizing neural networks could enable people to train models that generate Deepfakes faster.
The authors should consider possible harms that could arise when the technology is being used as intended and functioning correctly, harms that could arise when the technology being used as intended but gives incorrect results, and harms following from (intentional or unintentional) misuse of the technology.
If there are negative societal impacts, the authors could also discuss possible mitigation strategies (e.g., gated release of models, providing defenses in addition attacks, mechanisms for monitoring misuse, mechanisms to monitor how system learns from feedback over time, improving the efficiency and accessibility ML).
11. Safeguards
Does the paper describe safeguards that have been put in place for responsible release of data or models that have a high risk for misuse (e.g., pretrained language models, image generators, scraped datasets)?
Question:
Answer: [NA]
Justification: Our method well-address the privacy issure and poses no such risks.
Guidelines:
The answer NA means that the paper poses no such risks.
Released models that have high risk for misuse or dual-use should be released with necessary safeguards to allow for controlled use of the model, for example by requiring that users adhere to usage guidelines or restrictions to access the model or implementing safety filters.
Datasets that have been scraped from the Internet could pose safety risks. The authors should describe how they avoided releasing unsafe images.
We recognize that providing effective safeguards is challenging, and many papers do not require this, but we encourage authors to take this into account and make best faith effort.
12. Licenses for existing assets
Question: Are the creators or original owners of assets (e.g.. code, data, models), used in the paper. properly credited and are the license and terms of use explicitly mentioned and properly respected?
Answer: [Yes]
Justification: We have cited the original paper and proviced necessary information in the line 246 and Appendix C.I.
Guidelines:
The answer NA means that the paper does not use existing assets.
The authors should cite the original paper that produced the code package dataset.
The authors should state which version of the asset is used and, if possible, include URL.
The name of the license (c.g., CC-BY 4.0) should be included for each asset.
For scraped data from a particular source (e.g., website), the copyright and terms of service of that source should be provided.
If assets are released, the license, copyright information, and terms of use in the batasets.papersstt paperswi thcode. cww/ datasets package should be provided. For popular datasets,
has curated licenses for some datasets. Their licensing guide can help determine the license of dataset.
For existing datasets that are re-packaged, both the original license and the license of the derived asset (if it has changed) should be provided.
23

---

If this information is not available online, the authors are encouraged to reach out to the asset's 's creators.
13. New Assets
Question: Are new assets introduced in the paper well documented and is the documentation provided alongside the assets?
Answer: [NA]
Justification:
We totally public benchmarks.
Guidelines:
The answer NA means that the paper does not release new assets,
Researchers should communicate the details of the dataset/code/moodl as part of their submissions via structured templates. This includes details about training, license, limitations, etc.
The paper should discuss whether and how consent was obtained from people whose asset is used.
At submission time, remember to anonymize your assets (if applicable). You can either create an anonymized URL or include an anonymized zip file.
14. Crowdsourcing and Research with Human Subjects
Question: For crowdsourcing experiments and research with human subjects, does the paper include the full text of instructions given to participants and screenshots, if applicable, as well details about compensation (if any)?
Answer: [NA]
Justification: Our paper does not involve crowdsourcing nor research with human subjects.
Guidelines:
The answer NA means that the paper does not involve crowdsoureing nor research with human subjects.
Including this information in the supplemental material is fine, but if the main contribu- tion of the paper involves human subjects, then as much detail as possible should be included in the main paper.
According the NeurIPS Code of Ethies, workers involved in data collection, curation, or other labor should be paid at least the minimum wage in the country of the data collector.
15. Institutional Review Board (IRB) Approvals or Equivalent for Research with Human Subjects
Question: Does the paper describe potential risks incurred by study participants, whether such risks were disclosed to the subjects, and whether Institutional Review Board (IRB) approvals (or an equivalent approval/review based on the requirements of your country or institution) were obtained?
Answer: [NA]
Justification: Our paper does not involve crowdsourcing nor research with human subjects.
Guidelines:
The answer NA means that the paper does not involve crowdsourcing research with human subjects.
Depending on the country in which research is conducted, IRB approval (or equivalent) may be required for any human subjects research. If you obtained IRB approval, you should clearly state this in the paper.
We recognize that the procedures for this may vary significantly between institutions and locations, and we expect authors to adhere to the NeurlPS Code of Ethics and the guidelines for their institution.
For initial submissions, do not include any information that would break anonymity (if applicable), such as the institution conducting the review.
24


Reviews:
[{"review_id": "D3reCEABsw", "reviewer": "Reviewer_Dn4X", "summary": "To solve the privacy issue and negative transfer phenomenon in the cross-domain recommendation, the authors propose a novel framework named FedGCDR. Following the HVH pipeline, two key modules collaboratively transfer positive knowledge and filter the negative interference from source domains. In the experimental part, real world data in sixteen domains validated the model's performance.", "questions": "In practical application, heterogeneity exists between different domains, and it may not be appropriate to use the same embedding dimension. Is there a possible solution?", "limitations": "Please refer to the weak points.", "rating": 7, "confidence": 5, "soundness": 3, "presentation": 3, "contribution": 3, "strengths": "1.\tNovelty. Dynamic attention mechanism in the end-to-end framework ensures an automated domain filtering mechanism. The HVH pipeline makes the training of multi-domain scenes efficient, coupled with differential privacy technology, ensuring the privacy of the training process.\n2.\tTheory. This paper adopts the Gauss mechanism guarantee on the middle embedding to defend against inference attacks and proves its validity by theory.\n3.\tExperiments. Based on the Amazon data set, the author carried out a detailed experiment and analyzed the coping ability of various methods to the phenomenon of negative transfer from two perspectives of soft negative transfer and hard negative transfer, thus verifying the superiority of the proposed method. Based on verifying the effectiveness of the two modules, the detailed ablation experiment fully reveals the influence of the two modules on domains of different data quality, which is very convincing.", "weaknesses": "1.\tThe introduction and related works sections of the paper introduce two pivotal concepts: intra-domain privacy and inter-domain privacy. However, the definitions provided for these concepts appear to be inconsistent, which may obscure the paper's motivation regarding privacy concerns. For the paper to effectively convey its contributions and significance, it is crucial that these two concepts are clearly and uniformly defined. \n2.\tThe authors have chosen to emphasize the \"Broader-Domain CDR\" scenario, which involves more than three domains when defining the problem.  While this distinction is noted, it is not immediately clear why the term \"multi-domain CDR\" is not used to introduce the framework, as it seems to be a more commonly accepted term in the literature.", "quality": null, "clarity": null, "significance": null, "originality": null, "strengths_and_weaknesses": "", "was_revised": false, "final_justification": "", "rebuttal": "We thank the reviewer for the constructive review and valuable questions that have helped us improve our work.\n\n**W1:** The definitions provided for the intra-domain privacy and inter-domain privacy appear to be inconsistent.\n\n**Response:** We agree and we **will give a unified and complete definition in the introduction section of paper’s updated version.**\n\n**W2:** Why emphasize the concept of  ‘Broader-Domain CDR’.\n\n**Responese:** Because solving the cross-domain recommendation problem with more than three participating domains is very important for better mining user preferences. In existing work in the area of cross-domain recommendation, researchers tend to focus on only two domains. These works often do not generalize well to multi-domain tasks. There are also some studies that begin to focus on multi-domain knowledge transfer, but they are also limited to only three domains [1]. We believe that these studies do not fully reflect the nature of multi-domain, while paying insufficient attention to privacy and negative transfer challenges. These two challenges become more severe with the number of domains (lines 44 through 55). We therefore emphasize a number of domains greater than three in the article to distinguish our method from previous works. As shown in Table 2 of paper’s previous version, our methods (FedGCDR, FedGCDR-DP) outperform all baselines under the settings of 4 domains, 8 domains and 16 domains.\n\n[1] Liu W, Chen C, Liao X, et al. Federated Probabilistic Preference Distribution Modelling with Compactness Co-Clustering for Privacy-Preserving Multi-Domain Recommendation[C]//IJCAI. 2023: 2206-2214.\n\n**Q1:**  Heterogeneity of embedding dimension exists between different domains.\n\n**Response:** For solving the problem of heterogeneity of embedding dimensions, we have two possible approaches. 1. Aligning the attention layers of different domains. Since our method does not directly transmit the original embedding, each domain can choose the appropriate embedding dimension according to its own characteristics. Intermediate embeddings of the same dimension can be obtained by aligning the weight matrices of the attention layers, thus realizing knowledge transfer. 2. Aligning dimensions by mapping functions. Before knowledge transfer, we will first map the knowledge vectors of the current domain to the feature space of the target domain through MLP. The embedding dimensions of the source and target domains can be aligned by changing the input dimension of the MLP.", "claims_and_evidence": "", "methods_and_evaluation_criteria": "", "theoretical_claims": "", "experimental_designs_or_analyses": "", "relation_to_broader_scientific_literature": "", "essential_references_not_discussed": "", "other_strengths_and_weaknesses": "", "other_comments_or_suggestions": "", "questions_for_authors": "", "summary_of_paper": "", "summary_of_recommendation": "", "technical_quality": "", "clarity_of_presentation": "", "potential_impact": "", "robotics_focus": "", "quality_of_limitations": "", "questions_for_rebuttal": "", "reasons_to_accept": "", "reasons_to_reject": "", "questions_to_authors": "", "extra_scores": {}}, {"review_id": "XL9sAWKIsa", "reviewer": "Reviewer_GMwN", "summary": "The paper proposes a novel federated graph learning framework, FedGCDR, aimed at addressing the challenges of privacy and negative transfer (NT) in Broader-Source Cross-Domain Recommendation (BS-CDR) scenarios. The framework includes two key modules: the positive knowledge transfer module and the positive knowledge activation module. These modules ensure privacy preservation and mitigate NT by employing differential privacy and feature mapping techniques, followed by graph expansion and fine-tuning in the target domain. The framework is validated through extensive experiments on the Amazon dataset, demonstrating its superior performance over existing methods.", "questions": "1. About the clerical error in writing, such as in line 105, should \"privacy of individual users (inter-domain privacy)\" be \"intra-domain privacy\"? The line 166 “we learn learning…”, and the line 584 “FedCT’s HR@10 performance is better on Amazon-4@CDs than on Amazon-8@CDs”. But according to Figure 6, it should be the Amazon-8@CDs that outperform the Amazon-4@CDs for FedCT's HR@10.\n2. In Section 3.1, the authors assumed that users are partially overlapping between domains, so how do non-overlapping users perform graph expansion in the target domain?\n3. The improvement in recommendation performance of the proposed framework is demonstrated in the experimental section, but why another important contribution on privacy preservation is not discussed?\n4. Does FedGCDR-DP in Tables 1 and 2 refer to another variant method? What is the difference with the proposed FedGCDR? This is not explained relevantly in the paper.\n5. Are the Amazon-4, Amazon-8 shown in Table 4 randomly divided? Or is there another domain selection strategy?", "limitations": "Yes. The authors have addressed the limitations.", "rating": 6, "confidence": 3, "soundness": 3, "presentation": 3, "contribution": 3, "strengths": "1. The paper considers privacy preservation and negative transfer (NT) challenges under a more generic scenario of Broader-Source Cross-Domain Recommendation (BS-CDR).\n2. The framework's design is modular, allowing for easy adaptation and potential integration with other recommendation system components.\n3. The experiments cover 16 popular domains from the Amazon dataset and demonstrate that FedGCDR outperforms state-of-the-art methods in terms of recommendation accuracy.", "weaknesses": "1. Despite the overall clarity of the writing, there are several clerical mistakes that could easily mislead the reader.\n2. While the results on the Amazon dataset are promising, it is unclear how well the model generalizes to other datasets or real-world scenarios with different characteristics.\n3. The authors emphasize that the contribution lies in provides high-quality BS-CDR recommendations while safeguarding both user privacy and domain confidentiality. However, the experimental section is completely devoid of any discussion on privacy preservation.", "quality": null, "clarity": null, "significance": null, "originality": null, "strengths_and_weaknesses": "", "was_revised": false, "final_justification": "", "rebuttal": "We sincerely thank you for your valuable comments and suggestions. We hope our response addresses your concerns.\n\n**W1&Q1:** Writing errors.\n\n**Response:** Thank you. We agree and **will correct any errors you have raised and scrutinize the paper and fix any typos during the revision process.**\n\n| Line | Writing error | Revised version |\n| --- | --- | --- |\n| 105 | privacy of either individual users (inter-domain privacy) | privacy of either individual users (intra-domain privacy) |\n| 116 | we learn learning a function to estimate the scores | we learn a function to estimate the scores |\n| 584-587 | The slight difference is that FedCT’s HR@10 performance is better on Amazon-4@CDs than on Amazon-8@CDs. | Compared to Figure 6,the slight difference is that FedCT’s HR@10 performance is better on Amazon-8@CDs than on Amazon-4@CDs. |\n\n**W2**: How well does the model generalize to other datasets or real-world scenarios with different characteristics?\n\n**Response**: We agree that it is important to verify the generalization performance of the model on other datasets. Thus, we conduct new experiments on Douban dataset to validate the generalization capability of the proposed method.  As shown in Table u2 in **Global Rebuttal** pdf file, our method yields both optimal and sub-optimal results on almost all metrics. **We will add these new results in the updated version**. For details, please refer to the **Global Rebuttal** with pdf attachment.\n\n**W3&Q3:** The experimental section is completely devoid of any discussion on privacy preservation.\n\n**Response:** In paper’s previous version, we did not detail privacy protection related content in the **experimental section** due to space constraints, instead we added this part in the **Appendix of paper’s previous version**. In accordance with previous work on federated recommendation, we have made full analysis and discussion on privacy protection in both theoretical and experimental aspects. For details, please refer to **Appendix A  Privacy analysis** for theoretical proof and **Appendix D.3 Privacy budget** for the experiments on privacy budget in paper’s previous version.\n\n**Q2:**   How do non-overlapping users perform graph expansion in the target domain?\n\n**Response:** Non-overlapping users perform graph expansion by a set of Gaussian noise matrices. In lines 197 through 198 of paper’s previous version, we had explained the case where there are no corresponding users in one of the source domains in the graph expansion strategy: “*It is worth noting that for source domains where a user has no rating, $X_{S_i}$*  *is a Gaussian noise matrix.”*  Therefore, for non-overlapping users in the target domain, we conduct the graph expansion with $M$ Gaussian noise matrices (assuming $M$ source domains). \n\n**Q4:** Does FedGCDR-DP in Tables 1 and 2 refer to another variant method? What is the difference with the proposed FedGCDR?\n\n**Response:** Yes, FedGCDR and FedCDR-DP are two variants of our proposed method, where FedGCDR does not add Gaussian noise to the knowledge transfer module, while FedGCDR-DP is a complete implementation of the method integrating Gaussian noise. By introducing these two variants it is possible to compare the loss of accuracy due to the addition of inter-domain privacy protection. Thanks for this valuable comment, and **we will add these descriptions to the experimental section in paper’s updated version.**\n\n**Q5:** Domain selection strategy.\n\n**Response:** The basis of our domain selection strategy is the amount of data before performing data filtering. Thus, we sorted the domains contained in the Amazon dataset based on the amount of data in descending order and selected the top 16 domains. Similarly, Amazon-4 and Amazon-8 were selected accordingly. The only exception is that we prioritized the Movie domain, which has a relatively small amount of source data, based on popularity. **We will add this content to the appendix in paper’s updated version.**", "claims_and_evidence": "", "methods_and_evaluation_criteria": "", "theoretical_claims": "", "experimental_designs_or_analyses": "", "relation_to_broader_scientific_literature": "", "essential_references_not_discussed": "", "other_strengths_and_weaknesses": "", "other_comments_or_suggestions": "", "questions_for_authors": "", "summary_of_paper": "", "summary_of_recommendation": "", "technical_quality": "", "clarity_of_presentation": "", "potential_impact": "", "robotics_focus": "", "quality_of_limitations": "", "questions_for_rebuttal": "", "reasons_to_accept": "", "reasons_to_reject": "", "questions_to_authors": "", "extra_scores": {}}, {"review_id": "R2OQhzLx1t", "reviewer": "Reviewer_xoiK", "summary": "This paper presents a novel federated framework of CDR, FedGCDR, for privacy preserving and negative transfer between domains. Its key strengths include a solid theoretical foundation analyzing the DP-based privacy preserving and a novel and dynamic attention generation method to mitigate negative transfer. By tackling both privacy concern and potential negative transfer problem, this work makes a valuable contribution to the field.", "questions": "1. This article is mainly from the user's perspective to solve the privacy problem and whether the proposed framework can be extended to more realistic company-level applications.\n\n2. Negative transfer is an important problem in CDR as well as transfer learning. However, facing the ‘when to transfer’ problem [1] in CDR, it seems to be a potential method to stop the negative transfer when it occurs. Why cannot we adopt this simple method to avoid such complex attention generation progress? \n\n[1] Pan S J, Yang Q. A survey on transfer learning[J]. IEEE Transactions on knowledge and data engineering, 2009, 22(10): 1345-1359.", "limitations": "Please refer to the weak points.", "rating": 8, "confidence": 5, "soundness": 3, "presentation": 3, "contribution": 3, "strengths": "1. Tackling two Critical Issues for cross-domain recommendation: The paper addresses crucial challenges for privacy preservation and potential negative transfer. By following a horizontal-vertical-horizontal FL pipeline and adopting the Gaussian mechanism, the paper ensures the privacy of both intra-domain and inter-domain. By the graph expansion, the paper generates domain attention to filter harmful info from multiple source domains. Addressing these two issues is essential for fostering a wide range of participation and maintaining a healthy balance between domain involvement and model performance, ultimately contributing to the overall sustainability and scalability of CDR.\n\n2. Novel Approach: The proposed FedGCDR approach is novel in several aspects. First, the problem formulation itself, which focuses on mitigating negative transfer under the privacy constraint, is a departure from existing methods that directly transfer with the consumption of data sparsity and well-chosen domains. Second, the theoretical analysis of the reliability of the Gaussian mechanism protecting the high-order embeddings provides valuable insights and paves the way for a secure transfer between domains. Third, the incorporation of GAT as a tool for both mining domain knowledge and generating dynamic domain attention to filter potentially harmful information is a novel method to address the negative transfer issue, which has been a long-standing challenge in CDR.\n\n3. Theoretical Guarantees and Practical Considerations: The paper presents a solid theoretical foundation by analyzing the Gaussian mechanism to protect high-order embeddings output by GAT. Furthermore, by combining horizontal fl with vertical fl, knowledge transfer down to edge devices is realistic and avoids the additional overhead required for the vertical process.\n\n4. Comprehensive Empirical Evaluation: The paper's strength lies in its comprehensive empirical evaluation across sixteen widely used domains of the Amazon dataset, spanning various sub-datasets of different domain numbers. Besides the overall model performance comparison, the paper compares the ability of mitigating negative transfer with defined concept ‘soft negative transfer’ and ‘hard negative transfer’. The target domain setting with different data quality further demonstrates the generalization of the model and the irrationality of the direct transmission of the previous method.", "weaknesses": "1. The paper addresses the broader-domain CDR involving more than three domains. While multi-domain CDR is undoubtedly significant and has been the subject of extensive research, the emphasis on the number \"three\" is noted. Could the authors clarify the significance of this number in their work? Does this particular emphasis distinguish their research from existing studies? If not central to the research, it is suggested that the authors reconsider the emphasis on this number to avoid potential misunderstandings or unnecessary focus.\n\n2. By introducing multiple social regulation terms, yet the authors have chosen one specific term (as shown in Equation 9). It would be beneficial for the authors to provide an explanation for this selection. Is this choice based on theoretical analysis, empirical results, or comparative study with existing literature? Clearly articulating the basis for this choice will help readers understand its importance and applicability.", "quality": null, "clarity": null, "significance": null, "originality": null, "strengths_and_weaknesses": "", "was_revised": false, "final_justification": "", "rebuttal": "We sincerely thank you for your valuable comments and suggestions. We hope our response addresses your concerns.\n\n**W1:** Why addresses the broader-domain CDR involving more than three domains.\n\n**Response:** Because solving the cross-domain recommendation problem with more than three participating domains is very important for better mining user preferences. In existing work in the area of cross-domain recommendation, researchers tend to focus on only two domains. These works often do not generalize well to multi-domain tasks. There are also some studies that begin to focus on multi-domain knowledge transfer, but they are also limited to only three domains [1]. We believe that these studies do not fully reflect the nature of multi-domain, while paying insufficient attention to privacy and negative transfer challenges. These two challenges become more severe with the number of domains, in line…. We therefore emphasize a number of domains greater than three in the article to distinguish our method from previous works. As shown in Table 1 and Table 2 of paper’s previous version, our methods (FedGCDR, FedGCDR-DP) outperform all baselines under the settings of 4 domains, 8 domains and 16 domains.\n\n[1] Liu W, Chen C, Liao X, et al. Federated Probabilistic Preference Distribution Modelling with Compactness Co-Clustering for Privacy-Preserving Multi-Domain Recommendation[C]//IJCAI. 2023: 2206-2214.\n\n**W2:** Why choose the special social term in Soreg.\n\n**Response:** We use the social term in Equation 9 because it better exploits the user's interests. In Soreg, the authors propose two innovative social terms, as follows:\n\n$(1)\\sum_{i=1}^m || U_i -\\frac{\\sum_{f \\in \\mathcal{F}^+(i) } Sim(i,f) \\times U_f}{\\sum_{f \\in \\mathcal{F}^+(i) } Sim(i,f)}||^2_F$\n\n$(2)\\sum^m_{i=1} \\sum_{f \\in \\mathcal{F}^+(i)}Sim(i,f)||U_i-U_f||^2_F$\n\nwhere, according to Soreg, the second formula: *“is insensitive to users with different tastes”* [2]. For the same user's behavior on different domains, we consider that it shows different dimensions of user interests, which is why we combine as many domains as possible to fully explore user interests. So the same user may exhibit very different tastes on different domains, so we take the more appropriate first social term.\n\n[2] Ma H, Zhou D, Liu C, et al. Recommender systems with social regularization[C]//Proceedings of the fourth ACM international conference on Web search and data mining. 2011: 287-296.\n\n**Q1:**  Whether the proposed framework can be extended to more realistic company-level applications.\n\n**Response:** Yes, our approach fits real-world scenarios and can be modified to better fit company-level scenarios. In real applications, there are many similar setups, e.g., between different recommendation scenarios on online platforms, where their users are partially overlapping and the items are often different. Our assumptions are consistent with the real scenarios, while some modifications to our approach are needed to accommodate company-level applications. In specific, it is necessary to change the intra-domain GAT training and fine-tuning phase of the horizontal FL setting to a centralized training process undertaken by a domain server (e.g., a company). Knowledge transfer between domains (company to company) is still well protected with DP.\n\n**Q2:** Why cannot we adopt stop-transfer method to avoid such complex attention generation progress?\n\n**Response:** Because it's hard to determine whether to stop the transfer when there are multiple source domains. For simpler cross-domain or transfer learning setting, the approach you propose is also really a way to avoid negative transfer.\n\nHowever, during CDR training, especially in our hypothetical BD-CDR scenario (more than three domains with multiple source domains and one target domain) setup, it would be difficult to determine which source domain or domains lead to negative transfer. Also we need to consider that the time a domain is joined affects whether it produces negative transfer or not. For example, assuming that the knowledge transfer from domain A to domain B is positive, while the re-transfer of knowledge from domain A to domain B, which aggregates the knowledge of domains C and D, is negative. Positive transfer indicates that there is some information or pattern in domain A that is beneficial to domain B. The later negative transfer suggests that after combining the knowledge of domains C and D, the negative knowledge in domain A dominates the transfer process. This shows that it is very arbitrary to rely only on the positive and negative transfer to judge whether to transfer or not, and the correct approach should be for the target domain to actively filter the negative information, so as to fully utilize the knowledge of each domain. Our method filters out potential harmful or conflicting knowledge from source domains, and mitigates the issue of negative transfer.", "claims_and_evidence": "", "methods_and_evaluation_criteria": "", "theoretical_claims": "", "experimental_designs_or_analyses": "", "relation_to_broader_scientific_literature": "", "essential_references_not_discussed": "", "other_strengths_and_weaknesses": "", "other_comments_or_suggestions": "", "questions_for_authors": "", "summary_of_paper": "", "summary_of_recommendation": "", "technical_quality": "", "clarity_of_presentation": "", "potential_impact": "", "robotics_focus": "", "quality_of_limitations": "", "questions_for_rebuttal": "", "reasons_to_accept": "", "reasons_to_reject": "", "questions_to_authors": "", "extra_scores": {}}, {"review_id": "ou7lutarf2", "reviewer": "Reviewer_yU7k", "summary": "This paper introduces an innovative federated CDR framework with two key modules tailored for privacy preserving and negative transfer. For privacy, it presents a solid theoretical guarantee. For negative transfer, it generates domain attentions by virtual social links and conduct a fine-tuning stage to filter source domain knowledge. With the comprehensive empirical evaluation, it shows the superiority of the proposed framework.", "questions": "1. From the perspective of privacy, DP is widely used in previous method. What are the privacy innovations in this paper? What is the unique technical contribution between this work and existing works on privacy-preserving CDR?", "limitations": "Please refer to weaknesses.", "rating": 7, "confidence": 5, "soundness": 4, "presentation": 4, "contribution": 4, "strengths": "1. Innovation: Utilizing HVH structure and Gaussian noise to ensure all-round privacy, GAT with virtual links to generate domain attentions and comprehensive objective function with prediction loss, mapping loss and social regularization loss seems technically sound.\n2. Theoretical analysis: The paper provides a robust theoretical analysis. The detailed explanation concerning protecting transferred high-order embeddings from inference attacks strengthen significantly strengthen the paper's theoretical framework. \n3. Generally, the proposed method is complex but this paper is well-organized and easy to follow.\n4. Experimental demonstrations: The authors have conducted extensive experiments to validate the effectiveness of the proposed method, including the performance comparison, the ablation study, the privacy budget study and an additional dual-domain study. The compare of overall performance validates the superiority of proposed model. The ablation study validates the effectiveness of two key modules and the privacy budget study demonstrate the balance of privacy preservation and model performance. The dual-domain study proves that the proposed model can also cope with traditional scenarios.", "weaknesses": "1. In Figure 2, the use of the terms \"extended\" and \"expansion\" appears to be inconsistent.  Consistent use of terminology throughout the paper will aid in the reader's comprehension and the overall clarity of the presentation\n2. The authors have conducted extensive experiments on the Amazon dataset as detailed in the experimental section. However, as the authors themselves acknowledge in the limitation section, the generalization performance of their framework has not been sufficiently validated. Given this, and despite the fact that the experiments may not align with the authors' definition of BD-CDR, it is recommended that the authors consider conducting experiments on other datasets (e.g., Douban) to further verify the generalizability of their framework. This additional testing would strengthen the paper's claims regarding the robustness of the proposed approach.", "quality": null, "clarity": null, "significance": null, "originality": null, "strengths_and_weaknesses": "", "was_revised": false, "final_justification": "", "rebuttal": "We would like to sincerely thank you for positive evaluations and valuable comments for improvement.\n\n**W1:** The use of the terms \"extended\" and \"expansion\" appears to be inconsistent.\n\n**Response:** We agree and **we will use *expand/expansion* uniformly in paper’s updated version.**\n\n**W2:** The generalization performance of the framework has not been sufficiently validated.\n\n**Response:** We agree that it is important to verify the generalization performance of the model on other datasets. Thus, we conduct new experiments on Douban dataset to validate the generalization capability of the proposed method.  As shown in Table u2 in **Global Rebuttal** pdf file, our method yields both optimal and sub-optimal results on almost all metrics. **We will add these new results in the updated version**. For details, please refer to the **Global Rebuttal** with pdf attachment.\n\n**Q1:**  What are the privacy innovations in this paper?\n\nResponse: We provide a full range of privacy both intra-domain and inter-domain. In our work, we include two horizontal federation phases and DP (line 177, **Privacy-preserving knowledge extraction**)  to fully guarantee intra-domain privacy and inter-domain privacy. In previous work, those focusing on firm-level privacy tend to protect inter-domain privacy through privacy techniques (DP, projection methods, etc.); those focusing on user-level privacy tend to consider only intra-domain privacy (embeddings from different domains are passed in plaintext). In the **Appendix** of paper's previous version, we had provided a theoretical proof of privacy preservation (**Appendix A**) and experimentally verify the model performance under different privacy budgets (**Appendix D.3**). Our approach considers the full range of privacy protection, which distinguishes us from previous approaches, and outperforms all baselines.", "claims_and_evidence": "", "methods_and_evaluation_criteria": "", "theoretical_claims": "", "experimental_designs_or_analyses": "", "relation_to_broader_scientific_literature": "", "essential_references_not_discussed": "", "other_strengths_and_weaknesses": "", "other_comments_or_suggestions": "", "questions_for_authors": "", "summary_of_paper": "", "summary_of_recommendation": "", "technical_quality": "", "clarity_of_presentation": "", "potential_impact": "", "robotics_focus": "", "quality_of_limitations": "", "questions_for_rebuttal": "", "reasons_to_accept": "", "reasons_to_reject": "", "questions_to_authors": "", "extra_scores": {}}]

Author rebuttal:
We sincerely thank all the reviewers for their valuable comments and suggestions, which are crucial for improving our work. Here we carefully response your questions point-by-point, and more details of the responses are **in the PDF file** at the bottom of this **Author Rebuttal.**

**1:** How well the model generalizes to other datasets or real-world scenarios with different characteristics.

**Response:** As per your requests, we conducted new experiments on the Douban dataset to validate the generalizability of our approach. The dataset information (Table u1) and experimental results (Table u2) are available in the rebuttal PDF file.

- *Experimental settings:* We filtered users and items in the dataset with a number of interactions less than 5. Since the Douban dataset contains only three domains, we set them as target domains for the experiments in turn.
- *Results:*  As shown in Table u2, first, our method outperforms all the baselines in almost all metrics, except NDCG@5 on Movie domain. For the only exception to the NDCG@5 metric, our method is the second best. Although **Single domain** is better than our methods on NDCG@5, it has poor performance on the other three metrics (HR@5, HR@10, NDCG@10) because it can not leverage knowledge form source domains. Second, for the CDR scenario, our method demonstrated its superiority compared to other CDR methods. Third, the inclusion of Gaussian noise for the purpose of preserving inter-domain privacy does not always have a side effect on model performance (e.g., in the book domain,  FedGCDR-DP outperforms FedGCDR on the metrics HR@5, NDCG@5 and NDCG@10), and we believe that the inclusion of noise benefits the model's attention mechanism enhancing its ability to filter out noise and negative knowledge. In conclusion, the experimental results demonstrate that FedGCDR significantly outperforms state-of-the-art methods.

Meta-review: This paper proposes FedGCDR, a novel federated graph learning framework for cross-domain recommendation that effectively addresses privacy concerns and the risk of negative transfer. The framework features a positive knowledge transfer module that leverages differential privacy to securely extract reliable domain knowledge, and a knowledge activation module that filters out harmful knowledge to enhance target domain training. Extensive experiments on the Amazon dataset demonstrate that FedGCDR significantly outperforms state-of-the-art methods. Reviewers agree that the problem studied is meaningful and the proposed method has clear merits. We appreciate the authors' efforts in the rebuttal to address reviewers' comments and provide additional experimental results. I recommend acceptance, with the suggestion that the authors carefully address the additional feedback and suggestions raised by reviewers if the paper is accepted at NeurIPS.
Decision: Accept (poster)