针对跨域图数据的隐私泄露问题,提出新型成员推断攻击方法。
An Out-Of-Distribution Membership Inference Attack Approach for Cross-Domain Graph Attacks
- 构建多域影子子图模拟真实数据分布差异
- 通过稳定节点表示区分训练与未知数据特征
- 支持跨域推广,适合研究图模型隐私风险者
基于图神经网络的方法因引入目标拓扑结构而面临隐私泄露风险,攻击者可通过分析拓扑分布绕过目标对敏感属性的先验知识,实现成员推断攻击(MIA)。随着隐私关注加剧,传统MIA假设攻击者拥有同分布辅助数据,已越来越脱离现实。本文将现实场景中分布多样性问题归类为外分布(OOD)问题,提出新型图外分布成员推断攻击(GOOD-MIA),实现跨域图攻击。具体地,我们构建来自不同域的影子子图以建模真实数据分布多样性;探索在外部干扰下保持稳定的节点表示,消除混淆环境中的冗余信息,提取任务相关关键特征,更清晰地区分训练数据与未见数据特性。该OOD设计使跨域攻击成为可能。最后,通过风险外推优化攻击推理阶段的域适应性,提升攻击在其他域的泛化能力。实验表明,GOOD-MIA在多域设计数据集上均取得优异攻击性能。
原文摘要 · Abstract (English)
Graph Neural Network-based methods face privacy leakage risks due to the introduction of topological structures about the targets, which allows attackers to bypass the target's prior knowledge of the sensitive attributes and realize membership inference attacks (MIA) by observing and analyzing the topology distribution. As privacy concerns grow, the assumption of MIA, which presumes that attackers can obtain an auxiliary dataset with the same distribution, is increasingly deviating from reality. In this paper, we categorize the distribution diversity issue in real-world MIA scenarios as an Out-Of-Distribution (OOD) problem, and propose a novel Graph OOD Membership Inference Attack (GOOD-MIA) to achieve cross-domain graph attacks. Specifically, we construct shadow subgraphs with distributions from different domains to model the diversity of real-world data. We then explore the stable node representations that remain unchanged under external influences and consider eliminating redundant information from confounding environments and extracting task-relevant key information to more clearly distinguish between the characteristics of training data and unseen data. This OOD-based design makes cross-domain graph attacks possible. Finally, we perform risk extrapolation to optimize the attack's domain adaptability during attack inference to generalize the attack to other domains. Experimental results demonstrate that GOOD-MIA achieves superior attack performance in datasets designed for multiple domains.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。