arXiv:2601.19745cs.LG2026-01

提出新方法从联邦图学习梯度中恢复原始图结构与节点特征。

GraphDLG: Exploring Deep Leakage from Gradients in Federated Graph Learning

  • 基于梯度逆向推导图结构,再用递推公式恢复节点特征。
  • 在节点特征重建上提升5.46%(MSE),图结构重建提升25.04%(AUC)。
  • 适用于关注图数据隐私的科研人员与工业应用开发者。

联邦图学习(FGL)是一种新兴的隐私保护分布式图学习范式,允许多个数据持有者协同训练模型。然而,一个关键隐私风险是攻击者能否从共享梯度中重构原始数据,即深度梯度泄露(DLG)。现有研究主要针对图像或文本数据,而图数据因结构与特征高度耦合,其可恢复性尚不明确。本文首次对FGL中的成分进行理论分析,发现一旦图结构被恢复,节点特征可通过闭式递推规则重建。基于此,我们提出GraphDLG,一种从共享梯度中恢复原始训练图的新方法,可利用随机生成图或客户端本地图作为辅助信息提升恢复效果。大量实验表明,GraphDLG成功解耦图结构与节点特征,使节点特征重建的均方误差降低超5.46%,图结构重建的AUC提升超25.04%。

原文摘要 · Abstract (English)

Federated graph learning (FGL) has recently emerged as a promising privacy-preserving paradigm that enables distributed graph learning across multiple data owners. A critical privacy concern in federated learning is whether an adversary can recover raw data from shared gradients, a vulnerability known as deep leakage from gradients (DLG). However, most prior studies on the DLG problem focused on image or text data, and it remains an open question whether graphs can be effectively recovered, particularly when the graph structure and node features are uniquely entangled in GNNs. In this work, we first theoretically analyze the components in FGL and derive a crucial insight: once the graph structure is recovered, node features can be obtained through a closed-form recursive rule. Building on this analysis, we propose GraphDLG, a novel approach to recover raw training graphs from shared gradients in FGL, which can utilize randomly generated graphs or client-side training graphs as auxiliaries to enhance recovery. Extensive experiments demonstrate that GraphDLG outperforms existing solutions by successfully decoupling the graph structure and node features, achieving improvements of over 5.46% (by MSE) for node feature reconstruction and over 25.04% (by AUC) for graph structure reconstruction.

联邦学习图神经网络隐私保护梯度泄露

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。