Graph neural networks (GNNs) deliver state-of-the-art results in node classification, link prediction, and whole-graph prediction across chemistry, recommender systems, and social-network analysis. However, training them demands large labelled graphs and extensive GPU time, so a stolen model represents a costly loss of intellectual-property (IP) investment while retraining is prohibitively expensive. To counter this risk, we present EGNNFingers—a task-agnostic, explainability-driven fingerprinting framework expressly designed for GNN IP protection. EGNNFingers employs attribution methods to distil the relationship between inputs and outputs into a compact fingerprint that uniquely characterises the source model. Owners can later issue a small set of graph queries to an online service and, from the returned explanations, decide whether the deployed model originated from their protected GNN. Experiments on three public benchmarks show that EGNNFingers consistently achieves higher ownership-verification accuracy than the original GNNFingers method, confirming its practical value for protecting GNN IP and detecting piracy in real-world deployments.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

EGNNFingers: Explainability-Driven Fingerprinting Framework for GNN Ownership Verification

  • Wenqi Chen,
  • Jie Zhou,
  • Jinhao Sun,
  • Shengke Zeng,
  • Yiran Li

摘要

Graph neural networks (GNNs) deliver state-of-the-art results in node classification, link prediction, and whole-graph prediction across chemistry, recommender systems, and social-network analysis. However, training them demands large labelled graphs and extensive GPU time, so a stolen model represents a costly loss of intellectual-property (IP) investment while retraining is prohibitively expensive. To counter this risk, we present EGNNFingers—a task-agnostic, explainability-driven fingerprinting framework expressly designed for GNN IP protection. EGNNFingers employs attribution methods to distil the relationship between inputs and outputs into a compact fingerprint that uniquely characterises the source model. Owners can later issue a small set of graph queries to an online service and, from the returned explanations, decide whether the deployed model originated from their protected GNN. Experiments on three public benchmarks show that EGNNFingers consistently achieves higher ownership-verification accuracy than the original GNNFingers method, confirming its practical value for protecting GNN IP and detecting piracy in real-world deployments.