In this paper, we measure the privacy leakage via studying whether graph representations can be inverted to recover the graph used to generate them via graph reconstruction attack (GRA). We propose a GRA that recovers a graph's adjacency matrix from the representations via a graph decoder that minimizes the reconstruction loss between the partial graph and the reconstructed graph. We study three types of representations that are trained on the graph, i.e., representations output from graph convolutional network (GCN), graph attention network (GAT), and our proposed simplicial neural network (SNN) via a higher-order combinatorial Laplacian. Unlike the first two types of representations that only encode pairwise relationships, the third type of representation, i.e., SNN outputs, encodes higher-order interactions (e.g., homological features) between nodes. We find that the SNN outputs reveal the lowest privacy-preserving ability to defend the GRA, followed by those of GATs and GCNs, which indicates the importance of building more private representations with higher-order node information that could defend the potential threats, such as GRAs.
翻译:在本文中,我们通过研究图解表解能否被倒转,以通过图解重建攻击(GRA)来恢复用来生成图解的图解,来测量隐私渗漏。我们建议用一个GRA,通过一个图解解码器,通过一个图解解码器,将部分图与重建图之间的重建损失减少到最小,从图解码器中回收一个图解的相邻矩阵。我们研究了在图解上经过培训的三种类型的代表,即图解变网络、图解注意网络(GAT)的演示结果,以及我们提议的通过更高层次的组合式拉普拉克仪(SNNN)的模拟神经网络(SNN),这与前两种类型的代表器不同,前者仅将图解码成对称关系,即SNNN输出器的第三类型,将节解算出节点之间的更高层次的相互作用(例如同系特征)进行。我们发现SNNNEC输出显示保护GRA的最弱的隐私保存能力,其次是GATs和GCN,这表明建立更私人的演示的重要性,例如GRA。