arXiv:2602.00407cs.LG2026-02

攻击者通过模型梯度推断联邦图神经网络中的标签分布,威胁用户隐私。

Fed-Listing: Federated Label Distribution Inference in Graph Neural Networks

  • 仅利用训练时交换的最终层梯度,无需原始数据或节点特征。
  • 在4个基准数据集上性能远超随机猜测和现有基线方法。
  • 现有防御手段基本无效,除非严重降低模型效果,适合隐私安全研究者关注。

联邦图神经网络(FedGNNs)允许多个客户端在保护用户隐私的前提下协作学习图结构数据。然而,最新研究表明,在该框架中共享的模型更新(尤其是梯度)可能无意泄露本地用户的敏感信息。尽管传统联邦学习中的隐私推断攻击已有广泛研究,并被扩展到图场景,但联邦图神经网络中标签分布的推断问题仍鲜有探索。本文提出一种新型梯度攻击方法 Fed-Listing(联邦标签分布推断),可在不访问原始数据或节点特征的情况下,仅利用训练过程中交换的最终层梯度,隐蔽地推断目标客户端的私有标签统计信息。在四个基准数据集和三种GNN架构上的大量实验表明,该方法显著优于现有基线(包括随机猜测和Decaf),即使在非独立同分布(non-i.i.d.)等挑战性条件下也表现优异。此外,现有防御机制对Fed-Listing几乎无效,除非导致模型性能严重下降。代码与补充材料已公开:https://github.com/suprimnakarmi/Fed-Listing。

原文摘要 · Abstract (English)

Federated Graph Neural Networks (FedGNNs) facilitate collaborative learning across multiple clients with graph-structured data while preserving user privacy. However, emerging research indicates that within this setting, shared model updates, particularly gradients, can unintentionally leak sensitive information of local users. Numerous privacy inference attacks have been explored in traditional federated learning and extended to graph settings, but the problem of label distribution inference in FedGNNs remains largely underexplored. In this work, we introduce Fed-Listing (Federated Label Distribution Inference in GNNs), a novel gradient-based attack designed to infer the private label statistics of target clients in FedGNNs without access to raw data or node features. Fed-Listing only leverages the final-layer gradients exchanged during training to uncover statistical patterns that reveal class proportions in a stealthy manner. Extensive experiments on four benchmark datasets and three GNN architectures show that Fed-Listing significantly outperforms existing baselines, including random guessing and Decaf, even under challenging non-i.i.d. scenarios. Moreover, existing defense mechanisms can barely reduce the attack performance of Fed-Listing, unless the model's utility is severely degraded. The code implementation and Supplementary materials are available here: https://github.com/suprimnakarmi/Fed-Listing.

联邦学习图神经网络隐私攻击梯度泄露

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。