{"id":"https://openalex.org/W7129024957","doi":"https://doi.org/10.1145/3773966.3777929","title":"Unlearning Inversion Attacks for Graph Neural Networks","display_name":"Unlearning Inversion Attacks for Graph Neural Networks","publication_year":2026,"publication_date":"2026-02-16","ids":{"openalex":"https://openalex.org/W7129024957","doi":"https://doi.org/10.1145/3773966.3777929"},"language":null,"primary_location":{"id":"doi:10.1145/3773966.3777929","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3773966.3777929","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Nineteenth ACM International Conference on Web Search and Data Mining","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3773966.3777929","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009791750","display_name":"Jiahao Zhang","orcid":"https://orcid.org/0000-0003-0379-4494"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiahao Zhang","raw_affiliation_strings":["The Pennsylvania State University, University Park, USA"],"raw_orcid":"https://orcid.org/0000-0003-0379-4494","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102784377","display_name":"Yilong Wang","orcid":"https://orcid.org/0009-0009-2851-3055"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yilong Wang","raw_affiliation_strings":["Pennsylvania State University, University Park, USA"],"raw_orcid":"https://orcid.org/0009-0009-2851-3055","affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085548702","display_name":"Zhiwei Zhang","orcid":"https://orcid.org/0009-0007-6153-2739"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiwei Zhang","raw_affiliation_strings":["Pennsylvania State University, University Park, USA"],"raw_orcid":"https://orcid.org/0009-0007-6153-2739","affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126138682","display_name":"Xiaorui Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaorui Liu","raw_affiliation_strings":["North Carolina State University, Raleigh, USA"],"raw_orcid":"https://orcid.org/0000-0001-8217-5688","affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5121693798","display_name":"Suhang Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suhang Wang","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0000-0003-3448-4878","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"934","last_page":"945"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9305999875068665,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9305999875068665,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.032600000500679016,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.009200000204145908,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6899999976158142},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.642300009727478},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5960000157356262},{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.48100000619888306},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.4519999921321869},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3580000102519989}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6899999976158142},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.642300009727478},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6348999738693237},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5960000157356262},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.48100000619888306},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.4519999921321869},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.43130001425743103},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.40939998626708984},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.36719998717308044},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3580000102519989},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3147999942302704},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.29109999537467957},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.28949999809265137},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2800000011920929},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2766999900341034},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.2727999985218048}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3773966.3777929","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3773966.3777929","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Nineteenth ACM International Conference on Web Search and Data Mining","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3773966.3777929","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3773966.3777929","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Nineteenth ACM International Conference on Web Search and Data Mining","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5341107845306396,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W1488996941","https://openalex.org/W2090330503","https://openalex.org/W2296407087","https://openalex.org/W2535690855","https://openalex.org/W2809343047","https://openalex.org/W2907492528","https://openalex.org/W2914721378","https://openalex.org/W2963601856","https://openalex.org/W2998313947","https://openalex.org/W3003836855","https://openalex.org/W3022945404","https://openalex.org/W3023153742","https://openalex.org/W3045200674","https://openalex.org/W3068123808","https://openalex.org/W3071470454","https://openalex.org/W3091473186","https://openalex.org/W3124806946","https://openalex.org/W3125963848","https://openalex.org/W3138815606","https://openalex.org/W3154155772","https://openalex.org/W3154818219","https://openalex.org/W3196722731","https://openalex.org/W3206855510","https://openalex.org/W3211930400","https://openalex.org/W3214714397","https://openalex.org/W4221158899","https://openalex.org/W4224325687","https://openalex.org/W4284669411","https://openalex.org/W4296338020","https://openalex.org/W4296562799","https://openalex.org/W4307168805","https://openalex.org/W4307964254","https://openalex.org/W4312296169","https://openalex.org/W4362706499","https://openalex.org/W4367046930","https://openalex.org/W4367047069","https://openalex.org/W4385565597","https://openalex.org/W4385567899","https://openalex.org/W4385568427","https://openalex.org/W4393147268","https://openalex.org/W4396844349","https://openalex.org/W4401863408","https://openalex.org/W4401863495","https://openalex.org/W4403004898","https://openalex.org/W4403875615","https://openalex.org/W4407953572","https://openalex.org/W4413318879","https://openalex.org/W4415796054","https://openalex.org/W4416016839"],"related_works":[],"abstract_inverted_index":{"Graph":[0],"unlearning":[1,36,166],"methods":[2],"aim":[3],"to":[4,43,101,123,177],"efficiently":[5],"remove":[6],"the":[7,34,55,72,89],"impact":[8],"of":[9,74],"sensitive":[10],"data":[11],"from":[12],"trained":[13],"GNNs":[14],"without":[15],"full":[16],"retraining,":[17],"assuming":[18],"that":[19,98,118,149],"deleted":[20],"information":[21],"cannot":[22],"be":[23],"recovered.":[24],"In":[25],"this":[26,30],"work,":[27],"we":[28,85,112],"challenge":[29],"assumption":[31],"by":[32],"introducing":[33],"graph":[35,49,165],"inversion":[37],"attack:":[38],"given":[39],"only":[40],"black-box":[41],"access":[42],"an":[44,52,114],"unlearned":[45,67,76,102,124],"GNN":[46,154],"and":[47,71,79,87,94,125,137,172],"partial":[48],"knowledge,":[50],"can":[51],"adversary":[53],"reconstruct":[54],"removed":[56],"edges?":[57],"We":[58],"identify":[59],"two":[60],"key":[61],"challenges:":[62],"varying":[63],"probability-similarity":[64],"thresholds":[65,122],"for":[66],"versus":[68],"retained":[69],"edges,":[70],"difficulty":[73],"locating":[75],"edge":[77],"endpoints,":[78],"address":[80],"them":[81,139],"with":[82,140],"TrendAttack.":[83],"First,":[84],"derive":[86],"exploit":[88],"confidence":[90],"pitfall,":[91],"a":[92,105,159],"theoretical":[93],"empirical":[95],"pattern":[96],"showing":[97],"nodes":[99],"adjacent":[100],"edges":[103],"exhibit":[104],"large":[106],"drop":[107],"in":[108,163],"model":[109],"confidence.":[110],"Second,":[111],"design":[113],"adaptive":[115],"prediction":[116],"mechanism":[117],"applies":[119],"different":[120],"similarity":[121],"other":[126],"membership":[127,134,155],"edges.":[128],"Our":[129],"framework":[130],"flexibly":[131],"integrates":[132],"existing":[133],"inference":[135,156],"techniques":[136],"extends":[138],"trend":[141],"features.":[142],"Experiments":[143],"on":[144],"four":[145],"real-world":[146],"datasets":[147],"demonstrate":[148],"TrendAttack":[150],"significantly":[151],"outperforms":[152],"state-of-the-art":[153],"baselines,":[157],"exposing":[158],"critical":[160],"privacy":[161],"vulnerability":[162],"current":[164],"methods.":[167],"For":[168],"additional":[169],"implementation":[170],"details":[171],"technical":[173],"proofs,":[174],"please":[175],"refer":[176],"our":[178],"supplementary":[179],"materials.":[180]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-02-17T00:00:00"}