提出新攻击方法LinkThief,更精准窃取图神经网络的隐藏连接。
LinkThief: Combining Generalized Structure Knowledge with Node Similarity for Link Stealing Attack against GNN
- 融合结构知识与节点相似性,构建跨图桥梁增强攻击能力。
- 在无额外假设下,对真实图中93.6%的边实现有效窃取。
- 适合研究GNN隐私安全的研究者和防御设计者参考。
图神经网络(GNN)在多媒体领域应用广泛。近期研究表明,GNN易受链接窃取攻击,即攻击者可推断目标GNN训练图中的边存在。现有攻击多基于“节点后验相似则有边”的假设,却忽略不满足该条件的边。为此,本文提出LinkThief,一种结合广义结构知识与节点相似性的改进攻击方法,适用于攻击者仅掌握部分目标图与影子图的情况。为使攻击模型获得跨越目标图与影子图的链接结构洞见,我们引入“影子-目标桥接图”概念,并从中提取边子图结构特征。通过隐私泄露角度的理论分析,验证了该思路可行性。在此基础上,设计桥接图生成器构建桥接图;由边子图准备模块采样目标边邻域;再由结构特征提取器获取泛化结构知识,与节点相似性结合形成最终特征输入攻击模型。大量实验验证了理论分析正确性,并证明LinkThief在无需额外假设条件下仍能有效窃取链接,准确率达93.6%。
原文摘要 · Abstract (English)
Graph neural networks(GNNs) have a wide range of applications in multimedia.Recent studies have shown that Graph neural networks(GNNs) are vulnerable to link stealing attacks,which infers the existence of edges in the target GNN's training graph.Existing attacks are usually based on the assumption that links exist between two nodes that share similar posteriors;however,they fail to focus on links that do not hold under this assumption.To this end,we propose LinkThief,an improved link stealing attack that combines generalized structure knowledge with node similarity,in a scenario where the attackers' background knowledge contains partially leaked target graph and shadow graph.Specifically,to equip the attack model with insights into the link structure spanning both the shadow graph and the target graph,we introduce the idea of creating a Shadow-Target Bridge Graph and extracting edge subgraph structure features from it.Through theoretical analysis from the perspective of privacy theft,we first explore how to implement the aforementioned ideas.Building upon the findings,we design the Bridge Graph Generator to construct the Shadow-Target Bridge Graph.Then,the subgraph around the link is sampled by the Edge Subgraph Preparation Module.Finally,the Edge Structure Feature Extractor is designed to obtain generalized structure knowledge,which is combined with node similarity to form the features provided to the attack model.Extensive experiments validate the correctness of theoretical analysis and demonstrate that LinkThief still effectively steals links without extra assumptions.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。