arXiv:2605.02297cs.LG2026-05

提出图联邦遗忘机制,实现用户退出时信息彻底清除且模型性能不下降。

Graph Federated Unlearning for Privacy Preservation

论文配图:Graph Federated Unlearning for Privacy Preservation
图 1 · 摘自论文原文
  • 通过正交更新方向减少遗忘对整体性能影响
  • 引入虚拟客户端保持图结构与全局嵌入
  • 在真实退出场景下验证隐私保护效果,优于7种主流方法

图联邦学习(GFL)在保持用户数据本地化的同时实现分布式图数据训练,符合GDPR和CCPA等隐私政策中用户自由加入或退出的要求。然而,用户退出后敏感信息仍可能残留在中心服务器并被恶意客户端重新获取,这一问题在GFL中尚未受到足够重视。为此,本文探索机器遗忘(MU)技术以彻底清除用户信息。传统MU方法易导致整体性能下降,该问题在依赖局部消息传递与全局协作的GFL中更为严重。为此,本文提出两项改进:其一,确保遗忘更新方向与其它数据学习梯度正交,最小化对模型性能的影响;其二,由中心服务器维护虚拟客户端,以保留图拓扑结构和全局嵌入,避免恢复被移除实体的信息。我们在典型用户退出场景下进行综合实验,并构建新型成员推理框架,严格评估隐私保护可靠性。结果表明,所提方法有效且性能超越七种前沿基线方法。

原文摘要 · Abstract (English)

Graph federated learning (GFL) facilitates decentralized training on distributed graph data while keeping sensitive user information local, aligning with policies such as GDPR and CCPA that grant users the right to freely join or withdraw from learning systems. However, even decentralized, user information can persist after quitting, potentially propagating to central servers and then redistributing to malicious clients. This privacy leakage during user withdrawal, despite its importance, has received seldom attention in GFL. To fill the gap, we explore the potential of machine unlearning (MU) to thoroughly remove user information. However, classical MU methods are known to degrade overall performance, a problem that is exacerbated in GFL due to local message passing and global model collaboration. To this end, we make two adjustments to mitigate this challenge for GFL. First, we ensure unlearning updates that minimally affect overall performance, steering them in directions orthogonal to the gradients from learning other data. Second, we introduce virtual clients, maintained by the central server, to preserve graph topology and global embeddings without recovering information of removed entities. We conduct comprehensive experiments under a representative user-withdrawal scenario and propose a novel membership inference framework to rigorously evaluate and validate the reliability of our privacy preservation. The experimental results demonstrate the effectiveness of our approach, which also surpasses the performance of seven state-of-the-art baseline methods.

联邦学习隐私保护图神经网络遗忘学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。