{"id":"https://openalex.org/W7204469149","doi":"https://doi.org/10.48550/arxiv.2608.25727","title":"Auditing Privacy Risks in LLM-Enhanced Graph Neural Networks","display_name":"Auditing Privacy Risks in LLM-Enhanced Graph Neural Networks","publication_year":2026,"publication_date":"2026-08-26","ids":{"openalex":"https://openalex.org/W7204469149","doi":"https://doi.org/10.48550/arxiv.2608.25727"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.25727","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.25727","pdf_url":"https://arxiv.org/pdf/2608.25727","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.25727","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113269092","display_name":"Longzhu He","orcid":"https://orcid.org/0009-0001-7842-6605","observed_orcids":["https://orcid.org/0009-0001-7842-6605"]},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"He, Longzhu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148456764","display_name":"Zelang Wen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wen, Zelang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148431142","display_name":"Chaozhuo Li","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li, Chaozhuo","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5129645671","display_name":"Sen Su","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Su, Sen","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I139759216"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/privacy-attacks","display_name":"privacy attacks","score":0.9409999847412109},{"id":"https://openalex.org/keywords/membership-inference","display_name":"membership inference","score":0.8730000257492065},{"id":"https://openalex.org/keywords/label-inference","display_name":"label inference","score":0.9869999885559082},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"differential privacy","score":0.7549999952316284},{"id":"https://openalex.org/keywords/privacy-utility-trade-off","display_name":"privacy-utility trade-off","score":0.9580000042915344},{"id":"https://openalex.org/keywords/text-attributed-graphs","display_name":"text-attributed graphs","score":0.9580000042915344},{"id":"https://openalex.org/keywords/privacy-risk-assessment","display_name":"privacy risk assessment","score":0.5270000100135803},{"id":"https://openalex.org/keywords/privacy-defenses","display_name":"privacy defenses","score":0.5149999856948853}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7781999707221985},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5188000202178955},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.5091000199317932},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4519999921321869},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35830000042915344},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3562000095844269},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.3458000123500824},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3425999879837036},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.3400999903678894},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.335099995136261},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.3021000027656555},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.30090001225471497},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2989000082015991},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.29350000619888306},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.29159998893737793},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2897999882698059},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.28290000557899475},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27390000224113464},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.2685000002384186},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.26589998602867126},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2596000134944916},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.2531999945640564}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.25727","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.25727","pdf_url":"https://arxiv.org/pdf/2608.25727","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.25727","doi":"https://doi.org/10.48550/arxiv.2608.25727","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.25727","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.25727","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.25727","pdf_url":"https://arxiv.org/pdf/2608.25727","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204469149.pdf","grobid_xml":"https://content.openalex.org/works/W7204469149.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7160834619","https://openalex.org/W7143281920","https://openalex.org/W4414707835","https://openalex.org/W4404985743","https://openalex.org/W7211950112","https://openalex.org/W4403444014","https://openalex.org/W6891830872","https://openalex.org/W4403749454","https://openalex.org/W7162682088","https://openalex.org/W4391645416"],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2,128],"(LLMs)":[3],"have":[4],"recently":[5],"advanced":[6],"graph":[7,83,192],"neural":[8],"networks":[9],"(GNNs)":[10],"by":[11,153],"enriching":[12],"node":[13],"representations":[14,136],"with":[15],"semantic":[16,31],"information,":[17],"giving":[18],"rise":[19],"to":[20],"LLM-enhanced":[21,50,92,109,135,181],"GNNs":[22,51,110,182],"that":[23,134],"achieve":[24],"substantial":[25],"performance":[26],"gains.":[27],"However,":[28],"how":[29],"such":[30],"enhancement":[32],"affects":[33],"privacy":[34,47,68,89,115,168,178],"risks":[35,48,179],"remains":[36],"largely":[37],"underexplored.":[38],"To":[39],"bridge":[40],"this":[41,171],"gap,":[42],"we":[43,157],"systematically":[44],"audit":[45,176],"the":[46,123,146],"of":[49,57,177],"through":[52],"a":[53,174],"unified":[54],"framework":[55],"consisting":[56],"five":[58],"stages:":[59],"(1)":[60],"dataset":[61],"preparation,":[62],"(2)":[63],"victim":[64],"model":[65],"training,":[66],"(3)":[67],"attack,":[69],"(4)":[70],"risk":[71],"assessment,":[72],"and":[73,95,129,142,161,183,190],"(5)":[74],"defense":[75],"analysis.":[76],"Specifically,":[77],"our":[78],"evaluation":[79],"spans":[80],"ten":[81],"text-attributed":[82],"datasets":[84],"across":[85,126],"diverse":[86,127],"domains,":[87],"six":[88],"attacks,":[90],"42":[91],"GNN":[93],"configurations,":[94],"three":[96],"more":[97,138,151,188],"recent":[98],"language-model":[99],"backbones.":[100],"Extensive":[101],"experiments":[102],"show":[103],"that,":[104],"despite":[105],"their":[106,163],"utility":[107],"improvements,":[108],"consistently":[111],"exhibit":[112,137],"greater":[113],"empirical":[114],"vulnerability":[116],"than":[117],"shallow":[118],"text":[119],"representation":[120],"baselines":[121],"under":[122],"evaluated":[124],"attacks":[125],"datasets.":[130],"Further":[131],"analysis":[132],"shows":[133],"distinguishable":[139],"link-,":[140],"label-,":[141],"membership-related":[143],"signals":[144],"in":[145,165,180],"embedding":[147],"space,":[148],"making":[149],"them":[150],"exploitable":[152],"inference":[154],"attacks.":[155],"Finally,":[156],"evaluate":[158],"representative":[159],"defenses":[160],"examine":[162],"effectiveness":[164],"mitigating":[166],"these":[167],"risks.":[169],"Overall,":[170],"work":[172],"provides":[173],"systematic":[175],"offers":[184],"insights":[185],"for":[186],"developing":[187],"secure":[189],"trustworthy":[191],"learning":[193],"systems.":[194]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-08-28T00:00:00"}