Does Black-box Attribute Inference Attacks on Graph Neural Networks Constitute Privacy Risk?
Graph neural networks (GNNs) have shown promising results on real-life datasets and applications, including healthcare, finance, and education. However, recent studies have shown that GNNs are highly vulnerable to attacks such as membership inference attack and link reconstruction attack. Surprisingly, attribute inference attacks has received little attention. In this paper, we initiate the first investigation into attribute inference attack where an attacker aims to infer the sensitive user attributes based on her public or non-sensitive attributes. We ask the question whether black-box attribute inference attack constitutes a significant privacy risk for graph-structured data and their corresponding GNN model. We take a systematic approach to launch the attacks by varying the adversarial knowledge and assumptions. Our findings reveal that when an attacker has black-box access to the target model, GNNs generally do not reveal significantly more information compared to missing value estimation techniques. Code is available.
Code (0)
등록된 구현이 없습니다.
Tasks
AttributeInference AttackMembership Inference AttackReconstruction AttackSimilar Papers 제목 키워드 기반
Correlation inference attacks against machine learning models
Despite machine learning models being widely used today, the relationship between a model and its training dataset is not well understood. We explore correlation inference attacks, whether and when a model leaks informat…
AttributeBIG-bench Machine LearningDecision MakingInference Attack+1FaceLeaks: Inference Attacks against Transfer Learning Models via Black-box Queries
Transfer learning is a useful machine learning framework that allows one to build task-specific models (student models) without significantly incurring training costs using a single powerful model (teacher model) pre-tra…
Face RecognitionTransfer LearningBlack-box Model Inversion Attribute Inference Attacks on Classification Models
Increasing use of ML technologies in privacy-sensitive domains such as medical diagnoses, lifestyle predictions, and business decisions highlights the need to better understand if these ML technologies are introducing le…
AttributeClassificationGeneral ClassificationNavigating the Black Box: Leveraging LLMs for Effective Text-Level Graph Injection Attacks
Text-attributed graphs (TAGs) integrate textual data with graph structures, providing valuable insights in applications such as social network analysis and recommendation systems. Graph Neural Networks (GNNs) effectively…
Recommendation SystemsTAGText GenerationDikaios: Privacy Auditing of Algorithmic Fairness via Attribute Inference Attacks
Machine learning (ML) models have been deployed for high-stakes applications. Due to class imbalance in the sensitive attribute observed in the datasets, ML models are unfair on minority subgroups identified by a sensiti…
AttributeFairnessInference Attack