Backdoor Attack on Vertical Federated Graph Neural Network Learning
Federated Graph Neural Network (FedGNN) integrate federated learning (FL) with graph neural networks (GNNs) to enable privacy-preserving training on distributed graph data. Vertical Federated Graph Neural Network (VFGNN), a key branch of FedGNN, handles scenarios where data features and labels are distributed among participants. Despite the robust privacy-preserving design of VFGNN, we have found that it still faces the risk of backdoor attacks, even in situations where labels are inaccessible. This paper proposes BVG, a novel backdoor attack method that leverages multi-hop triggers and backdoor retention, requiring only four target-class nodes to execute effective attacks. Experimental results demonstrate that BVG achieves nearly 100% attack success rates across three commonly used datasets and three GNN models, with minimal impact on the main task accuracy. We also evaluated various defense methods, and the BVG method maintained high attack effectiveness even under existing defenses. This finding highlights the need for advanced defense mechanisms to counter sophisticated backdoor attacks in practical VFGNN applications.
Code (0)
등록된 구현이 없습니다.
Tasks
Backdoor AttackFederated LearningGraph Neural NetworkPrivacy PreservingMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
VFLIP: A Backdoor Defense for Vertical Federated Learning via Identification and Purification
Vertical Federated Learning (VFL) focuses on handling vertically partitioned data over FL participants. Recent studies have discovered a significant vulnerability in VFL to backdoor attacks which specifically target the …
Anomaly Detectionbackdoor defenseFederated LearningVertical Federated LearningPractical and General Backdoor Attacks against Vertical Federated Learning
Federated learning (FL), which aims to facilitate data collaboration across multiple organizations without exposing data privacy, encounters potential security risks. One serious threat is backdoor attacks, where an atta…
Federated LearningVertical Federated LearningCooperative Decentralized Backdoor Attacks on Vertical Federated Learning
Federated learning (FL) is vulnerable to backdoor attacks, where adversaries alter model behavior on target classification labels by embedding triggers into data samples. While these attacks have received considerable at…
Backdoor AttackFederated LearningMetric LearningVertical Federated LearningIs the Trigger Essential? A Feature-Based Triggerless Backdoor Attack in Vertical Federated Learning
As a distributed collaborative machine learning paradigm, vertical federated learning (VFL) allows multiple passive parties with distinct features and one active party with labels to collaboratively train a model. Althou…
Federated LearningRVFR: Robust Vertical Federated Learning via Feature Subspace Recovery
Vertical Federated Learning (VFL) is a distributed learning paradigm that allows multiple agents to jointly train a global model when each agent holds a different subset of features for the same sample(s). VFL is known t…
Federated LearningVertical Federated Learning