2024/12/20 by Yuecen Wei, Xingcheng Fu, Wei, Yuecen +9 · 3 citations
Computer Science · #Advanced Graph Neural Networks #Adversarial Robustness in Machine Learning #Anomaly Detection Techniques and Applications #Artificial intelligence #Artificial neural network #Computer science #Graph #Inference #Theoretical computer science
paper · pdf · doi:10.48550/arxiv.2412.15735
published in arXiv (Cornell University) (Cornell University)
openalex publication_date 2024/12/20 · openalex created_date 2025/10/10 · openalex updated_date 2026/08/01
Graph neural networks (GNNs) provide important prospective insights in applications such as social behavior analysis and financial risk analysis based on their powerful learning capabilities on graph data. Nevertheless, GNNs' predictive performance relies on the quality of task-specific node labels, so it is common practice to improve the model's generalization ability in the downstream execution of decision-making tasks through pre-training. Graph prompting is a prudent choice but risky without taking measures to prevent data leakage. In other words, in high-risk decision scenarios, prompt learning can infer private information by accessing model parameters trained on private data (publishing model parameters in pre-training, i.e., without directly leaking the raw data, is a tacitly accepted trend). However, myriad graph inference attacks necessitate tailored module design and processing to enhance inference capabilities due to variations in supervision signals. In this paper, we propose a novel Prompt-based unifying Inference Attack framework on GNNs, named ProIA. Specifically, ProIA retains the crucial topological information of the graph during pre-training, enhancing the background knowledge of the inference attack model. It then utilizes a unified prompt and introduces additional disentanglement factors in downstream attacks to adapt to task-relevant knowledge. Finally, extensive experiments show that ProIA enhances attack capabilities and demonstrates remarkable adaptability to various inference attacks.