Detailed Record



Unveiling the Role of Message Passing in Dual-Privacy Preservation on GNNs


Abstract Graph Neural Networks (GNNs) are powerful tools for learning representations on graphs, such as social networks. However, their vulnerability to privacy inference attacks restricts their practicality, especially in high-stake domains. To address this issue, privacy-preserving GNNs have been proposed, focusing on preserving node and/or link privacy. This work takes a step back and investigates how GNNs contribute to privacy leakage. Through theoretical analysis and simulations, we identify message passing under structural bias as the core component that allows GNNs to propagate andamplify privacy leakage. Building upon these findings, we propose a principled privacy-preserving GNN framework that effectively safeguards both node and link privacy, referred to as dual-privacy preservation. The framework comprises three major modules: a Sensitive Information Obfuscation Module that removes sensitive information from node embeddings, a Dynamic Structure Debiasing Module that dynamically corrects the structural bias, and an Adversarial Learning Module that optimizes the privacy-utility trade-off. Experimental results on four benchmark datasets validate the effectiveness of the proposed model in protecting both node and link privacy while preserving high utility for downstream tasks, such as node classification.
Authors T. C. Zhao ORCID , Hui Li Yinghui Hu ORCID , Lu Cheng ORCID
Journal Info Association for Computing Machinery | CIKM '23: Proceedings of the 32nd ACM International Conference on Information and Knowledge Management
Publication Date 10/21/2023
ISSN Not listed
TypeKeyword Image article
Open Access bronze Bronze Access
DOI https://doi.org/10.1145/3583780.3615104
KeywordsKeyword Image Signal Processing on Graphs (Score: 0.526388) , Differential Privacy (Score: 0.525294) , Network Embedding (Score: 0.514088) , Privacy Preservation (Score: 0.507347)