用大模型理解图结构语义,提升联邦图学习抗后门攻击能力
FedLSG: LLM-Enhanced Semantic Calibration for Federated Graph Backdoor Defense

- 将图结构和客户端行为转为自然语言表示,实现语义级分析
- 服务器用大模型识别恶意参与方,客户端用轻量模型抑制触发边
- 兼顾防御效果与图结构完整,适合高安全性图学习场景
联邦图神经网络易受后门攻击,现有防御依赖规则方法,缺乏语义理解,难以应对隐蔽触发器且损害正常结构。为此,我们提出首个融合大语言模型的联邦图后门防御框架 FedLSG。该框架通过图与行为到文本的映射,将本地图结构和客户端更新行为转化为语义丰富的自然语言表征。服务器端采用全规模大模型作为教师,提供全局上下文引导并评估聚合过程中的客户端更新以识别潜在恶意参与者;客户端则维护基于 LoRA 的轻量学生模型,执行语义推理,抑制与后门触发器相关的边的影响。通过语义化解读图模式与客户端行为,框架可自适应地将规则信号融入消息传递与客户端聚合过程进行防御。实验表明,FedLSG 显著提升了对后门攻击的抵抗力,同时保持了图结构完整性。
原文摘要 · Abstract (English)
Federated Graph Neural Networks (FedGNNs) are highly vulnerable to backdoor poisoning, yet existing defenses typically rely on rule-based approaches that lack semantic understanding, making them vulnerable to stealthy triggers and harmful to benign structures. To solve this, we present FedLSG, the first framework that integrates large language models (LLMs) into federated graph backdoor defense. FedLSG introduces a graph and behavior to text grounding scheme that transforms local graph structures and client update behaviors into semantically rich natural language representations. The framework further adopts a lightweight student-teacher architecture. On the server side, a full scale LLM serves as a teacher, providing global contextual guidance and evaluating client updates during aggregation to identify potentially malicious participants. On the client side, a LoRA-based student is maintained to perform semantic reasoning, to suppress the influence of edges associated with backdoor triggers. By enabling semantic interpretation of both graph patterns and client behaviors, the framework adaptively incorporates rule-based signals into message passing and client aggregation for defense. Experiments demonstrate that FedLSG significantly improves resistance to backdoor attacks without compromising graph integrity.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。