paper-with-me

Papers

Camouflaged Variational Graph AutoEncoder against Attribute Inference Attacks for Cross-Domain Recommendation

2025-04-30 · IEEE Transactions on Knowledge and Data Engineering 2025 4 · Yudi Xiong, Yongxin Guo, Weike Pan, Qiang Yang, Zhong Ming, Xiaojin Zhang, Han Yu, Tao Lin and Xiaoying Tang.

Cross-domain recommendation (CDR) aims to alleviate the data sparsity problem by leveraging the benefits of modeling two domains. However, existing research often focuses on the recommendation performance while ignores the privacy leakage issue. We find that an attacker can infer user attribute information from the knowledge (e.g., user preferences) transferred between the source and target domains. For example, in our experiments, the average inference accuracies of attack models on gender and age attributes are 0.8323 and 0.3897. The best-performing attack model achieves accuracies of 0.8847 and 0.4634, exceeding a random inference by 25.10% and 64.04%. We can see that the leakage of user attribute information may significantly exceed what would be expected from random inference. In this paper, we propose a novel recommendation framework named CVGAE (short for camouflaged variational graph autoencoder), which effectively models user behaviors and mitigates the risk of user attribute information leakage at the same time. Specifically, our CVGAE combines the strengths of VAEs in capturing latent features and variability with the ability of GCNs in exploiting high-order relational information. Moreover, to ensure against attribute inference attacks without sacrificing the recommendation performance, we design a user attribute protection module that fuses user attribute-camouflaged information with knowledge transfer during cross-domain processes. We then conduct extensive experiments on three real-world datasets, and find our CVGAE is able to achieve strong privacy protection while making little sacrifices in recommendation accuracy.

📄 PDF Abstract BibTeX

Code (0)

등록된 구현이 없습니다.

Tasks

AttributeRecommendation SystemsTransfer Learning

Similar Papers 제목 키워드 기반

Variational Graph Autoencoder for Heterogeneous Information Networks with Missing and Inaccurate Attributes

2023-11-14 · Yige Zhao, Jianxiang Yu, Yao Cheng, Chengcheng Yu 외

Heterogeneous Information Networks (HINs), which consist of various types of nodes and edges, have recently demonstrated excellent performance in graph mining. However, most existing heterogeneous graph neural networks (…

AttributeDecoderGraph Mining

Interpretable Representation Learning of Cardiac MRI via Attribute Regularization

2024-06-12 · Maxime Di Folco, Cosmin I. Bercea, Emily Chan, Julia A. Schnabel

Interpretability is essential in medical imaging to ensure that clinicians can comprehend and trust artificial intelligence models. Several approaches have been recently considered to encode attributes in the latent spac…

AttributeRepresentation Learning

CAMERA: Adapting to Semantic Camouflage in Unsupervised Text-Attributed Graph Fraud Detection

2026-05-19 · Junjun Pan, Yixin Liu, Yu Zheng, Lianhua Chi 외 arxiv

Text-attributed graph fraud detection (TAGFD) plays a critical role in preventing fraudulent activities on online social and e-commerce platforms. However, to evade detection, fraudsters continuously evolve their camoufl…

Fraud Detection

Simultaneous Unlearning of Multiple Protected User Attributes From Variational Autoencoder Recommenders Using Adversarial Training

2024-10-28 · Gustavo Escobedo, Christian Ganhör, Stefan Brandl, Mirjam Augstein 외

In widely used neural network-based collaborative filtering models, users' history logs are encoded into latent embeddings that represent the users' preferences. In this setting, the models are capable of mapping users' …

AttributeCollaborative FilteringFairness

DefenseVGAE: Defending against Adversarial Attacks on Graph Data via a Variational Graph Autoencoder

2020-06-16 · Ao Zhang, Jinwen Ma

Graph neural networks (GNNs) achieve remarkable performance for tasks on graph data. However, recent works show they are extremely vulnerable to adversarial structural perturbations, making their outcomes unreliable. In …