arXiv:2608.25727cs.LGcs.CR2026-08

LLM增强图神经网络易泄露隐私,需权衡安全与性能。

Are LLM-Enhanced GNNs Privacy-Safe?

论文配图:Are LLM-Enhanced GNNs Privacy-Safe?
图 1 · 摘自论文原文
  • 构建五阶段框架系统评估隐私风险,涵盖攻击、防御全流程。
  • 6个真实数据集实验显示,增强后模型隐私漏洞显著上升。
  • 语义增强放大敏感信号,导致链接、标签、成员推理更易发生。

大型语言模型(LLMs)通过引入语义信息增强了图神经网络(GNNs)的节点表示,使LLM增强型GNN在性能上取得显著提升。然而,其对隐私攻击的脆弱性尚未充分研究。本文提出一个统一框架,包含五个阶段:数据准备、目标模型训练、隐私攻击、风险评估与防御分析。在六个跨领域的文本属性图数据集上,采用六种代表性隐私攻击方法,针对链接、标签、成员三类威胁,构建42种由不同LLM特征增强器与主流GNN主干组合而成的模型配置。实验表明,尽管性能提升明显,但相比浅层文本表示基线,LLM增强型GNN普遍面临更高的隐私泄露风险。进一步分析发现,语义增强会放大嵌入空间中的链接、标签和成员相关信号,使其更易被推断攻击利用。最后评估差分隐私作为防御手段,结果显示虽可部分缓解风险,但带来显著性能下降,揭示了图学习中隐私与效用的根本权衡。本工作为理解LLM增强图学习的隐私风险提供了全面视角,并为构建更安全可信的系统提供实践指导。

原文摘要 · Abstract (English)

Large language models (LLMs) have recently advanced graph neural networks (GNNs) by enriching node representations with semantic information, giving rise to LLM-enhanced GNNs that achieve substantial performance gains. However, their vulnerability to privacy attacks, in which adversaries infer sensitive information from model outputs, remains largely underexplored. To bridge this gap, we present a systematic evaluation of privacy risks in LLM-enhanced GNNs through a unified framework consisting of five stages: (1) dataset preparation, (2) victim model training, (3) privacy attack, (4) risk assessment, and (5) defense analysis. Specifically, we conduct experiments on six real-world text-attributed graph datasets covering diverse domains. We consider six representative privacy attack methods targeting three fundamental threats, namely link, label, and membership inference, and construct 42 victim model configurations by combining multiple LLM-based feature enhancers with representative GNN backbones. Extensive experiments show that, despite their utility improvements, LLM-enhanced GNNs consistently exhibit increased vulnerability to privacy attacks compared to shallow text representation baselines. Further analysis reveals that semantic enrichment amplifies link-, label-, and membership-related signals in the embedding space, making them more exploitable by inference attacks. Finally, we evaluate differential privacy as a defense strategy and show that, while it can partially mitigate privacy risks, it introduces significant utility degradation, highlighting a fundamental privacy-utility trade-off in LLM-enhanced graph learning. Overall, this work provides a comprehensive understanding of privacy risks in LLM-enhanced GNNs and offers practical insights for developing more secure and trustworthy graph learning systems.

图神经网络隐私安全LLM增强差分隐私

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。