提出防御图神经网络拓扑泄露的新方法,保护图结构隐私
Safeguarding Graph Neural Networks against Topology Inference Attacks
- 通过黑盒访问构建图结构推断攻击,揭示GNN拓扑隐私风险
- 新防御框架PGR在保持模型精度前提下显著降低结构泄露
- 适合关注图数据隐私的AI研究者与工业应用开发者
图神经网络(GNN)在图结构数据学习中表现强大,但其广泛应用引发严重隐私担忧。现有研究多关注边级隐私,而图结构整体隐私这一关键威胁仍被忽视。本文系统研究了GNN中的拓扑隐私风险,揭示其易受图级推断攻击。为此,我们提出一系列拓扑推断攻击(TIAs),仅需黑盒访问即可重建目标训练图结构。实验表明,当前边级差分隐私机制无法有效缓解此风险,或严重损害模型性能。为此,我们提出私有图重构(PGR)防御框架,将其建模为双层优化问题:利用元梯度迭代生成合成训练图,同时基于演化图更新GNN模型。大量实验显示,PGR在几乎不牺牲模型精度的情况下显著减少拓扑泄露。代码已公开于https://github.com/JeffffffFu/PGR。
原文摘要 · Abstract (English)
Graph Neural Networks (GNNs) have emerged as powerful models for learning from graph-structured data. However, their widespread adoption has raised serious privacy concerns. While prior research has primarily focused on edge-level privacy, a critical yet underexplored threat lies in topology privacy - the confidentiality of the graph's overall structure. In this work, we present a comprehensive study on topology privacy risks in GNNs, revealing their vulnerability to graph-level inference attacks. To this end, we propose a suite of Topology Inference Attacks (TIAs) that can reconstruct the structure of a target training graph using only black-box access to a GNN model. Our findings show that GNNs are highly susceptible to these attacks, and that existing edge-level differential privacy mechanisms are insufficient as they either fail to mitigate the risk or severely compromise model accuracy. To address this challenge, we introduce Private Graph Reconstruction (PGR), a novel defense framework designed to protect topology privacy while maintaining model accuracy. PGR is formulated as a bi-level optimization problem, where a synthetic training graph is iteratively generated using meta-gradients, and the GNN model is concurrently updated based on the evolving graph. Extensive experiments demonstrate that PGR significantly reduces topology leakage with minimal impact on model accuracy. Our code is available at https://github.com/JeffffffFu/PGR.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。