{"id":"https://openalex.org/W4296338020","doi":"https://doi.org/10.1109/tkde.2022.3207915","title":"Model Inversion Attacks Against Graph Neural Networks","display_name":"Model Inversion Attacks Against Graph Neural Networks","publication_year":2022,"publication_date":"2022-09-19","ids":{"openalex":"https://openalex.org/W4296338020","doi":"https://doi.org/10.1109/tkde.2022.3207915"},"language":"en","primary_location":{"id":"doi:10.1109/tkde.2022.3207915","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2022.3207915","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063733770","display_name":"Zaixi Zhang","orcid":"https://orcid.org/0000-0002-0380-6558"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zaixi Zhang","raw_affiliation_strings":["Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0000-0002-0380-6558","affiliations":[{"raw_affiliation_string":"Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100453156","display_name":"Qi Liu","orcid":"https://orcid.org/0000-0001-6956-5550"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Liu","raw_affiliation_strings":["Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0000-0001-6956-5550","affiliations":[{"raw_affiliation_string":"Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085496384","display_name":"Zhenya Huang","orcid":"https://orcid.org/0000-0003-1661-0420"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenya Huang","raw_affiliation_strings":["Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0000-0003-1661-0420","affiliations":[{"raw_affiliation_string":"Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100446071","display_name":"Hao Wang","orcid":"https://orcid.org/0000-0001-9921-2078"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Wang","raw_affiliation_strings":["Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0000-0001-9921-2078","affiliations":[{"raw_affiliation_string":"Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074482769","display_name":"Chee\u2010Kong Lee","orcid":"https://orcid.org/0000-0003-1471-0989"},"institutions":[{"id":"https://openalex.org/I2250653659","display_name":"Tencent (China)","ror":"https://ror.org/00hhjss72","country_code":"CN","type":"company","lineage":["https://openalex.org/I2250653659"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chee-Kong Lee","raw_affiliation_strings":["Tencent Quantum Lab, Shenzhen, Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tencent Quantum Lab, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I2250653659"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048237545","display_name":"Enhong Chen","orcid":"https://orcid.org/0000-0002-4835-4102"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Enhong Chen","raw_affiliation_strings":["Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0000-0002-4835-4102","affiliations":[{"raw_affiliation_string":"Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.167,"has_fulltext":false,"cited_by_count":57,"citation_normalized_percentile":{"value":0.96928978,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"35","issue":"9","first_page":"8729","last_page":"8741"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9898999929428101,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8260350227355957},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5884829759597778},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4853752851486206},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.47785088419914246},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.46891626715660095},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4650638699531555},{"id":"https://openalex.org/keywords/topological-graph-theory","display_name":"Topological graph theory","score":0.4161505103111267},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3378641605377197},{"id":"https://openalex.org/keywords/voltage-graph","display_name":"Voltage graph","score":0.15642163157463074},{"id":"https://openalex.org/keywords/line-graph","display_name":"Line graph","score":0.15356352925300598},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.11641037464141846}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8260350227355957},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5884829759597778},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4853752851486206},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.47785088419914246},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.46891626715660095},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4650638699531555},{"id":"https://openalex.org/C157406716","wikidata":"https://www.wikidata.org/wiki/Q4115842","display_name":"Topological graph theory","level":5,"score":0.4161505103111267},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3378641605377197},{"id":"https://openalex.org/C22149727","wikidata":"https://www.wikidata.org/wiki/Q7940747","display_name":"Voltage graph","level":4,"score":0.15642163157463074},{"id":"https://openalex.org/C203776342","wikidata":"https://www.wikidata.org/wiki/Q1378376","display_name":"Line graph","level":3,"score":0.15356352925300598},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.11641037464141846}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tkde.2022.3207915","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2022.3207915","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3424485895","display_name":null,"funder_award_id":"61922073","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6859851492","display_name":null,"funder_award_id":"U20A20229","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7176628275","display_name":null,"funder_award_id":"WK2150110021","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":68,"referenced_works":["https://openalex.org/W1492230849","https://openalex.org/W2027595342","https://openalex.org/W2028584480","https://openalex.org/W2051267297","https://openalex.org/W2080900058","https://openalex.org/W2099438806","https://openalex.org/W2142498761","https://openalex.org/W2145339207","https://openalex.org/W2150611147","https://openalex.org/W2152284345","https://openalex.org/W2153959628","https://openalex.org/W2473418344","https://openalex.org/W2512472178","https://openalex.org/W2535690855","https://openalex.org/W2607500032","https://openalex.org/W2772692493","https://openalex.org/W2795435272","https://openalex.org/W2803831897","https://openalex.org/W2892247084","https://openalex.org/W2902020649","https://openalex.org/W2908442265","https://openalex.org/W2912240430","https://openalex.org/W2914953695","https://openalex.org/W2963308146","https://openalex.org/W2964583308","https://openalex.org/W2964971928","https://openalex.org/W2975819162","https://openalex.org/W2980540750","https://openalex.org/W2984488829","https://openalex.org/W2994506732","https://openalex.org/W2997404190","https://openalex.org/W3011667710","https://openalex.org/W3035616549","https://openalex.org/W3042321348","https://openalex.org/W3042856524","https://openalex.org/W3043638540","https://openalex.org/W3091473186","https://openalex.org/W3098276446","https://openalex.org/W3124962940","https://openalex.org/W3160274714","https://openalex.org/W3168561516","https://openalex.org/W3171131018","https://openalex.org/W3176393519","https://openalex.org/W3189076644","https://openalex.org/W3189551349","https://openalex.org/W3196012972","https://openalex.org/W3213927281","https://openalex.org/W4206912256","https://openalex.org/W4281396648","https://openalex.org/W4288102801","https://openalex.org/W6628547770","https://openalex.org/W6638826736","https://openalex.org/W6651597697","https://openalex.org/W6681029592","https://openalex.org/W6726873649","https://openalex.org/W6730084236","https://openalex.org/W6736685754","https://openalex.org/W6738964360","https://openalex.org/W6751569023","https://openalex.org/W6755124781","https://openalex.org/W6767095891","https://openalex.org/W6767526851","https://openalex.org/W6776644305","https://openalex.org/W6784858877","https://openalex.org/W6801935883","https://openalex.org/W6802320626","https://openalex.org/W6802872360","https://openalex.org/W6803334427"],"related_works":["https://openalex.org/W4205991736","https://openalex.org/W2767597557","https://openalex.org/W3094552683","https://openalex.org/W3211302945","https://openalex.org/W4284975088","https://openalex.org/W4386136067","https://openalex.org/W4366772049","https://openalex.org/W4388486485","https://openalex.org/W4387415041","https://openalex.org/W4379229548"],"abstract_inverted_index":{"Many":[0],"data":[1,16,38,51],"mining":[2],"tasks":[3],"rely":[4],"on":[5,73,107,231],"graphs":[6],"to":[7,25,48,58,80,88,91,137,145,161,183,263],"model":[8,43,70,108,192,247],"relational":[9,15],"structures":[10],"among":[11],"individuals":[12],"(nodes).":[13],"Since":[14],"are":[17,260,306],"often":[18],"sensitive,":[19],"there":[20],"is":[21,41,85,159,181,287,296],"an":[22],"urgent":[23],"need":[24],"evaluate":[26,280],"the":[27,42,53,89,93,118,128,132,138,147,163,170,208,213,218,223,239,244,273,288,294],"privacy":[28,35,60,317],"risks":[29],"in":[30,52,65,123,127,153,207],"graph":[31,78,120,150,166,175,178,186,297],"data.":[32,151],"One":[33],"famous":[34],"attack":[36,82],"against":[37,111,316],"analysis":[39,121],"models":[40],"inversion":[44,71,109,248],"attack,":[45],"which":[46],"aims":[47],"infer":[49,146],"sensitive":[50],"training":[54,149],"dataset":[55],"and":[56,168,172,190,221,234,250,253,293,310],"leads":[57,79],"great":[59],"concerns.":[61],"Despite":[62],"its":[63],"success":[64],"grid-like":[66],"domains,":[67],"directly":[68],"applying":[69],"attacks":[72,110,282],"non-grid":[74],"domains":[75],"such":[76,304],"as":[77],"poor":[81],"performance.":[83],"This":[84],"mainly":[86],"due":[87],"failure":[90],"consider":[92],"unique":[94],"properties":[95],"of":[96,117,165,174,275],"graphs.":[97],"To":[98],"bridge":[99],"this":[100,124],"gap,":[101],"we":[102,142,226,242],"conduct":[103],"a":[104,155,177,197],"systematic":[105],"study":[106,243],"Graph":[112],"Neural":[113],"Networks":[114],"(GNNs),":[115],"one":[116,286],"state-of-the-art":[119],"tools":[122],"paper.":[125],"First,":[126],"white-box":[129],"setting":[130,211],"where":[131,212],"attacker":[133,214],"has":[134],"full":[135],"access":[136],"target":[139,191],"GNN":[140,219],"model,":[141],"present":[143],"GraphMI":[144],"private":[148,291],"Specifically":[152],"GraphMI,":[154],"projected":[156],"gradient":[157,232],"module":[158,180,200],"proposed":[160,240],"tackle":[162],"discreteness":[164],"edges":[167,256],"preserve":[169],"sparsity":[171],"smoothness":[173],"features;":[176],"auto-encoder":[179],"used":[182],"efficiently":[184],"exploit":[185],"topology,":[187],"node":[188],"attributes,":[189],"parameters":[193],"for":[194,312],"edge":[195,251],"inference;":[196],"random":[198],"sampling":[199],"can":[201,215],"finally":[202],"sample":[203],"discrete":[204],"edges.":[205],"Furthermore,":[206],"hard-label":[209],"black-box":[210],"only":[216],"query":[217],"API":[220],"receive":[222],"classification":[224],"results,":[225],"propose":[227],"two":[228,284],"methods":[229],"based":[230],"estimation":[233],"reinforcement":[235],"learning":[236],"(RL-GraphMI).":[237],"With":[238],"methods,":[241],"connection":[245],"between":[246],"risk":[249],"influence":[252,259],"show":[254,302],"that":[255,303],"with":[257],"greater":[258],"more":[261,313],"likely":[262],"be":[264],"recovered.":[265],"Extensive":[266],"experiments":[267],"over":[268],"several":[269],"public":[270],"datasets":[271],"demonstrate":[272],"effectiveness":[274],"our":[276,281],"methods.":[277],"We":[278],"also":[279],"under":[283],"defenses:":[285],"well-designed":[289],"differential":[290],"training,":[292],"other":[295],"preprocessing.":[298],"Our":[299],"experimental":[300],"results":[301],"defenses":[305,315],"not":[307],"sufficiently":[308],"effective":[309],"call":[311],"advanced":[314],"attacks.":[318]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":24},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":11}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}