Abstract:In recent years, recommender systems play a pivotal role in helping users identify the most suitable items that satisfy personal preferences. As user-item interactions can be naturally modelled as graph-structured data, variants of graph convolutional networks (GCNs) have become a well-established building block in the latest recommenders. Due to the wide utilization of sensitive user profile data, existing recommendation paradigms are likely to expose users to the threat of privacy breach, and GCN-based recommenders are no exception. Apart from the leakage of raw user data, the fragility of current recommenders under inference attacks offers malicious attackers a backdoor to estimate users' private attributes via their behavioral footprints and the recommendation results. However, little attention has been paid to developing recommender systems that can defend such attribute inference attacks, and existing works achieve attack resistance by either sacrificing considerable recommendation accuracy or only covering specific attack models or protected information. In our paper, we propose GERAI, a novel differentially private graph convolutional network to address such limitations. Specifically, in GERAI, we bind the information perturbation mechanism in differential privacy with the recommendation capability of graph convolutional networks. Furthermore, based on local differential privacy and functional mechanism, we innovatively devise a dual-stage encryption paradigm to simultaneously enforce privacy guarantee on users' sensitive features and the model optimization process. Extensive experiments show the superiority of GERAI in terms of its resistance to attribute inference attacks and recommendation effectiveness.

Inferring Private Attributes Based on Graph Convolutional Neural Network in Social Networks

Devil in Disguise: Breaching Graph Neural Networks Privacy through Infiltration

Graph Convolutional Networks for Privacy Metrics in Online Social Networks

Social Influence‐based Privacy Inference Attacks in Online Social Networks

Industrial Scale Privacy Preserving Deep Neural Network

Inferring User Profiles in Online Social Networks Based on Convolutional Neural Network.

Empirical Analysis of Attribute Inference Techniques in Online Social Network.

Inference Attacks Based on Neural Networks in Social Networks

Does Black-box Attribute Inference Attacks on Graph Neural Networks Constitute Privacy Risk?

Personal Information Inference in Social Networks

De-anonymizing Social Networks and Inferring Private Attributes Using Knowledge Graphs

Data Privacy Protection Model Based on Graph Convolutional Neural Network

A Privacy Inference Model Based on Attribute Graph.

Learning a Fair and Privacy-Preserving Graph Neural Network from Private and Limited Sensitive Attributes

An Improved Social Attribute Inference Scheme Based on Multi-Attribute Correlation

Image and Attribute Based Convolutional Neural Network Inference Attacks in Social Networks

Priv-S: Privacy-Sensitive Data Identification in Online Social Networks.

Social Network De-Anonymization and Privacy Inference with Knowledge Graph Model

Infer Latent Privacy for Attribute Network in Knowledge Graph

DeepAttr: Inferring Demographic Attributes Via Social Network Embedding

Graph Embedding for Recommendation against Attribute Inference Attacks