PrivGNN: High-Performance Secure Inference for Cryptographic Graph Neural Networks

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Wang, Fuyi, Chen, Zekai, Fan, Mingyuan, Zhou, Jianying, Pan, Lei, Zhang, Leo Yu
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866917057902149632
author Wang, Fuyi
Chen, Zekai
Fan, Mingyuan
Zhou, Jianying
Pan, Lei
Zhang, Leo Yu
author_facet Wang, Fuyi
Chen, Zekai
Fan, Mingyuan
Zhou, Jianying
Pan, Lei
Zhang, Leo Yu
contents Graph neural networks (GNNs) are powerful tools for analyzing and learning from graph-structured (GS) data, facilitating a wide range of services. Deploying such services in privacy-critical cloud environments necessitates the development of secure inference (SI) protocols that safeguard sensitive GS data. However, existing SI solutions largely focus on convolutional models for image and text data, leaving the challenge of securing GNNs and GS data relatively underexplored. In this work, we design, implement, and evaluate $\sysname$, a lightweight cryptographic scheme for graph-centric inference in the cloud. By hybridizing additive and function secret sharings within secure two-party computation (2PC), $\sysname$ is carefully designed based on a series of novel 2PC interactive protocols that achieve $1.5\times \sim 1.7\times$ speedups for linear layers and $2\times \sim 15\times$ for non-linear layers over state-of-the-art (SotA) solutions. A thorough theoretical analysis is provided to prove $\sysname$'s correctness, security, and lightweight nature. Extensive experiments across four datasets demonstrate $\sysname$'s superior efficiency with $1.3\times \sim 4.7\times$ faster secure predictions while maintaining accuracy comparable to plaintext graph property inference.
format Preprint
id arxiv_https___arxiv_org_abs_2511_02185
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle PrivGNN: High-Performance Secure Inference for Cryptographic Graph Neural Networks
Wang, Fuyi
Chen, Zekai
Fan, Mingyuan
Zhou, Jianying
Pan, Lei
Zhang, Leo Yu
Cryptography and Security
Machine Learning
Graph neural networks (GNNs) are powerful tools for analyzing and learning from graph-structured (GS) data, facilitating a wide range of services. Deploying such services in privacy-critical cloud environments necessitates the development of secure inference (SI) protocols that safeguard sensitive GS data. However, existing SI solutions largely focus on convolutional models for image and text data, leaving the challenge of securing GNNs and GS data relatively underexplored. In this work, we design, implement, and evaluate $\sysname$, a lightweight cryptographic scheme for graph-centric inference in the cloud. By hybridizing additive and function secret sharings within secure two-party computation (2PC), $\sysname$ is carefully designed based on a series of novel 2PC interactive protocols that achieve $1.5\times \sim 1.7\times$ speedups for linear layers and $2\times \sim 15\times$ for non-linear layers over state-of-the-art (SotA) solutions. A thorough theoretical analysis is provided to prove $\sysname$'s correctness, security, and lightweight nature. Extensive experiments across four datasets demonstrate $\sysname$'s superior efficiency with $1.3\times \sim 4.7\times$ faster secure predictions while maintaining accuracy comparable to plaintext graph property inference.
title PrivGNN: High-Performance Secure Inference for Cryptographic Graph Neural Networks
topic Cryptography and Security
Machine Learning
url https://arxiv.org/abs/2511.02185