ST-iFGSM: Gradient-Based Trajectory Editing¶
FAMAIL adapts the Spatio-Temporal iterative Fast Gradient Sign Method (ST-iFGSM) — originally developed for adversarial attacks on trajectory classifiers — as a tool for fairness-aware trajectory editing. Instead of fooling a classifier, the algorithm moves pickup locations in the direction that most improves the combined fairness objective.
Algorithm¶
Key Properties¶
Sign gradient. The \(\text{sign}(\cdot)\) function normalizes the gradient to unit magnitude in each dimension, making the step size independent of gradient scale. This is the hallmark of FGSM-type methods.
Cumulative clipping. The total perturbation is always bounded by \([-\epsilon, \epsilon]\) per dimension, regardless of how many iterations run. A pickup can move at most \(\epsilon\) cells from its original location.
Sequential processing. Trajectories are modified one at a time, with global counts updated after each edit. This ensures each modification accounts for previous changes to the service distribution.
Temperature annealing. The soft cell assignment temperature decreases over iterations, transitioning from smooth exploration (broad gradients) to precise assignment (accurate cell counts).
Adaptation from Adversarial ML¶
| Concept | Original ST-iFGSM (Adversarial) | FAMAIL Adaptation |
|---|---|---|
| Objective | Adversarial loss (fool classifier) | Fairness objective \(\mathcal{L}\) |
| Direction | Maximize loss (attack) | Maximize fairness (improve) |
| Perturbation space | Continuous feature space | Continuous grid coordinates |
| Constraint | \(L_\infty\) norm bound | \(\epsilon\) grid cell bound |
| Discretization | N/A | Soft cell assignment bridges continuous → discrete |
Reframing adversarial methods for social good
The core insight of FAMAIL is that adversarial perturbation techniques — designed to attack models — can be repurposed as optimization tools for improving fairness. The mathematical machinery is the same; only the objective changes.