arXiv:2512.00307cs.LGcs.AI2025-12KDD被引 1

保护敏感符号图隐私的同时,保持高精度的节点表示学习。

Adversarial Signed Graph Learning with Differential Privacy

  • 分离正负边构建子图,结合对抗扰动降低梯度敏感性。
  • 在真实数据集上实现良好隐私与性能平衡,优于现有方法。
  • 适合需要保护社交网络中关系隐私的研究者使用。

带有正负边的符号图可建模社交网络中的复杂关系。基于平衡理论从多跳节点对推断边符号,符号图学习能生成同时保留结构和符号信息的节点嵌入。然而,在敏感符号图上训练会引发严重隐私问题,因模型参数可能泄露私有链接信息。现有差分隐私(DP)保护方法通常依赖边或梯度扰动,但不适用于符号图:边扰动会导致平衡理论下符号推断的级联错误;梯度扰动因节点相互依赖及符号翻转引起的梯度极性变化,增加敏感度,需注入更大噪声。本文受对抗学习对噪声鲁棒性的启发,提出ASGL,一种实现节点级差分隐私的隐私保护符号图学习方法。首先按边符号将符号图分解为正负子图,再设计梯度扰动的对抗模块以近似真实的符号连接分布。该模块可缓解级联错误,子图分离有助于降低敏感度。进一步,提出受限广度优先搜索树策略,融合平衡理论以确定生成节点对间的边符号,并实现梯度解耦,有效降低梯度敏感度。大量实验表明,ASGL在多个下游任务中均实现了优越的隐私-效用权衡。

原文摘要 · Abstract (English)

Signed graphs with positive and negative edges can model complex relationships in social networks. Leveraging on balance theory that deduces edge signs from multi-hop node pairs, signed graph learning can generate node embeddings that preserve both structural and sign information. However, training on sensitive signed graphs raises significant privacy concerns, as model parameters may leak private link information. Existing protection methods with differential privacy (DP) typically rely on edge or gradient perturbation for unsigned graph protection. Yet, they are not well-suited for signed graphs, mainly because edge perturbation tends to cascading errors in edge sign inference under balance theory, while gradient perturbation increases sensitivity due to node interdependence and gradient polarity change caused by sign flips, resulting in larger noise injection. In this paper, motivated by the robustness of adversarial learning to noisy interactions, we present ASGL, a privacy-preserving adversarial signed graph learning method that preserves high utility while achieving node-level DP. We first decompose signed graphs into positive and negative subgraphs based on edge signs, and then design a gradient-perturbed adversarial module to approximate the true signed connectivity distribution. In particular, the gradient perturbation helps mitigate cascading errors, while the subgraph separation facilitates sensitivity reduction. Further, we devise a constrained breadth-first search tree strategy that fuses with balance theory to identify the edge signs between generated node pairs. This strategy also enables gradient decoupling, thereby effectively lowering gradient sensitivity. Extensive experiments on real-world datasets show that ASGL achieves favorable privacy-utility trade-offs across multiple downstream tasks.

符号图差分隐私对抗学习节点嵌入

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。