arXiv:2506.03087cs.LGcs.AI2025-06KDD被引 1

解释信息可能泄露图模型决策逻辑,被用于高效盗取模型。

Do Explanations Increase the Risk of Decision Logic Leakage? Explanation-Guided Stealing of Graph Models

  • 利用解释对齐与引导数据增强,精准捕获目标模型决策逻辑。
  • 在有限查询下实现对目标模型行为与推理模式的高精度复制。
  • 揭示可解释GNN的安全风险,适合安全与模型保护研究者参考。

图神经网络(GNN)在药物发现和金融分析等领域的图结构数据分析中日益重要,推动了模型透明性的需求。可解释GNN通过揭示影响预测的关键子图满足这一需求,但这些解释机制可能无意间使模型面临安全风险。本文研究此类解释如何泄露关键决策逻辑,进而被用于模型盗取。我们提出{ extmethod},一种新型盗取框架,结合解释对齐以捕捉决策逻辑,并通过引导数据增强实现有限查询下的高效训练,从而有效复现目标模型的预测行为与内在推理模式。在分子图数据集上的实验表明,该方法在模型盗取任务中优于传统方法。本工作揭示了可解释GNN在敏感领域部署中的重要安全问题,并建议采取防护措施应对基于解释的攻击。代码已开源:https://github.com/beanmah/EGSteal。

原文摘要 · Abstract (English)

Graph Neural Networks (GNNs) have become essential tools for analyzing graph-structured data in domains such as drug discovery and financial analysis, leading to a growing demand for model transparency. Recent advances in explainable GNNs have addressed this need by revealing important subgraphs that influence predictions, but these explanation mechanisms may inadvertently expose these models to security risks. This paper investigates how such explanations potentially leak critical decision logic that can be exploited for model stealing. We propose {\method}, a novel stealing framework that integrates explanation alignment for capturing decision logic with guided data augmentation for efficient training under limited queries, enabling effective replication of both the predictive behavior and underlying reasoning patterns of target models. Experiments on molecular graph datasets demonstrate that our approach shows advantages over conventional methods in model stealing. This work highlights important security considerations for the deployment of explainable GNNs in sensitive domains and suggests the need for protective measures against explanation-based attacks. Our code is available at https://github.com/beanmah/EGSteal.

图神经网络模型盗取可解释性安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。