A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability
Not on the map. Why?
Abstract (arXiv)
Graph Neural Networks (GNNs) have made rapid developments in the recent years. Due to their great ability in modeling graph-structured data, GNNs are vastly used in various applications, including high-stakes scenarios such as financial analysis, traffic predictions, and drug discovery. Despite their great potential in benefiting humans in the real world, recent study shows that GNNs can leak private information, are vulnerable to adversarial attacks, can inherit and magnify societal bias from training data and lack interpretability, which have risk of causing unintentional harm to the users and society. For example, existing works demonstrate that attackers can fool the GNNs to give the outcome they desire with unnoticeable perturbation on training graph. GNNs trained on social networks may embed the discrimination in their decision process, strengthening the undesirable societal bias. Consequently, trustworthy GNNs in various aspects are emerging to prevent the harm from GNN models and increase the users' trust in GNNs. In this paper, we give a comprehensive survey of GNNs in the computational aspects of privacy, robustness, fairness, and explainability. For each aspect, we give the taxonomy of the related methods and formulate the general frameworks for the multiple categories of trustworthy GNNs. We also discuss the future research directions of each aspect and connections between these aspects to help achieve trustworthiness.
Key facts. Cited by 118 papers in the map (data through 7 Oct 2026). Builds on 160 of its 257 references that are in the map. First posted on arXiv 18 Apr 2022.
Builds on
160 of 257 references.
References · 160
- 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,282
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Inductive Representation Learning on Large Graphscited by 6,284
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2017Neural Message Passing for Quantum Chemistrycited by 3,460
- 2017Axiomatic Attribution for Deep Networkscited by 3,350
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2016Deep Learning with Differential Privacycited by 2,682
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2016Equality of Opportunity in Supervised Learningcited by 2,000
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,911
38 more
- 2017Modeling Relational Data with Graph Convolutional Networkscited by 1,684
- 2018Graph Neural Networks: A Review of Methods and Applicationscited by 1,571
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,461
- 2020Graph Contrastive Learning with Augmentationscited by 1,203
- 2017Explanation in Artificial Intelligence: Insights from the Social Sciencescited by 1,201
- 2018Sanity Checks for Saliency Mapscited by 1,149
- 2018Graph Convolutional Neural Networks for Web-Scale Recommender Systemscited by 1,133
- 2017Visualizing the Loss Landscape of Neural Netscited by 1,126
- 2017MoleculeNet: A Benchmark for Molecular Machine Learningcited by 1,037
- 2018Pitfalls of Graph Neural Network Evaluationcited by 994
- 2018Predict then Propagate: Graph Neural Networks meet Personalized PageRankcited by 987
- 2014Striving for Simplicity: The All Convolutional Netcited by 983
- 2019Strategies for Pre-training Graph Neural Networkscited by 964
- 2019GNNExplainer: Generating Explanations for Graph Neural Networkscited by 735
- 2019Heterogeneous Graph Attention Networkcited by 732
- 2020TUDataset: A collection of benchmark datasets for learning with graphscited by 718
- 2019Graph Neural Networks for Social Recommendationcited by 711
- 2018FastGCN: Fast Learning with Graph Convolutional Networks via Importance Samplingcited by 583
- 2020Heterogeneous Graph Transformercited by 581
- 2020GCC: Graph Contrastive Coding for Graph Neural Network Pre-Trainingcited by 461
- 2020Parameterized Explainer for Graph Neural Networkcited by 423
- 2019Federated Machine Learning: Concept and Applicationscited by 409
- 2018Adversarial Attacks on Neural Networks for Graph Datacited by 395
- 2020Explainability in Graph Neural Networks: A Taxonomic Surveycited by 383
- 2020Graph Structure Learning for Robust Graph Neural Networkscited by 368
- 2018Fairness Without Demographics in Repeated Loss Minimizationcited by 363
- 2018Learning Adversarially Fair and Transferable Representationscited by 353
- 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 347
- 2018On the Robustness of Interpretability Methodscited by 310
- 2019Interpretable machine learning: definitions, methods, and applicationscited by 303
- 2020GPT-GNN: Generative Pre-Training of Graph Neural Networkscited by 302
- 2018Adversarial Attack on Graph Structured Datacited by 300
- 2022From Anecdotal Evidence to Quantitative Evaluation Methods: A Systematic Review on Evaluating Explainable AIcited by 299
- 2021On Explainability of Graph Neural Networks via Subgraph Explorationscited by 280
- 2019Adversarial Attacks on Graph Neural Networks via Meta Learningcited by 261
- 2020Fairness without Demographics through Adversarially Reweighted Learningcited by 251
- 2020Iterative Deep Graph Learning for Graph Neural Networks: Better and Robust Node Embeddingscited by 212
- 2020XGNN: Towards Model-Level Explanations of Graph Neural Networkscited by 211
50 most cited of 160 All 160 (JSON)
Built on by
Citing papers per year: 2022: 10; 2023: 32; 2024: 30; 2025: 27; 2026: 19.
118 papers.
Sort:
By area:
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trendscited by 88
- 2023Generative Diffusion Models on Graphs: Methods and Applicationscited by 79
- 2024Fairness in Large Language Models: A Taxonomic Surveycited by 57
- 2024A Survey of Graph Neural Networks in Real world: Imbalance, Noise, Privacy and OOD Challengescited by 54
- 2023Unnoticeable Backdoor Attacks on Graph Neural Networkscited by 45
- 2022Explaining the Explainers in Graph Neural Networks: a Comparative Studycited by 34
- 2022Global Concept-Based Interpretability for Graph Neural Networks via Neuron Analysiscited by 32
- 2022A Comprehensive Survey on Trustworthy Recommender Systemscited by 32
- 2024Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defensescited by 30
- 2023A Survey on Explainability of Graph Neural Networkscited by 28
- 2023Towards Fair Graph Neural Networks via Graph Counterfactualcited by 23
- 2023Counterfactual Learning on Graphs: A Surveycited by 22
38 more
- 2023A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applicationscited by 22
- 2024IDEA: A Flexible Framework of Certified Unlearning for Graph Neural Networkscited by 22
- 2023A Critical Survey on Fairness Benefits of Explainable AIcited by 16
- 2023A Unified Framework of Graph Information Bottleneck for Robustness and Membership Privacycited by 14
- 2022Towards Faithful and Consistent Explanations for Graph Neural Networkscited by 13
- 2022HP-GMN: Graph Memory Networks for Heterophilous Graphscited by 13
- 2022TopoImb: Toward Topology-level Imbalance in Learning from Graphscited by 12
- 2023ERASE: Error-Resilient Representation Learning on Graphs for Label Noise Tolerancecited by 11
- 2024Safety in Graph Machine Learning: Threats and Safeguardscited by 11
- 2024Epidemiology-Aware Neural ODE with Continuous Disease Transmission Graphcited by 10
- 2023D4Explainer: In-Distribution GNN Explanations via Discrete Denoising Diffusioncited by 9
- 2023Combating Bilateral Edge Noise for Robust Link Predictioncited by 9
- 2024Coupling Graph Neural Networks with Fractional Order Continuous Dynamics: A Robustness Studycited by 9
- 2023A semantic backdoor attack against Graph Convolutional Networkscited by 8
- 2023Graph Agent: Explicit Reasoning Agent for Graphscited by 8
- 2024View-based Explanations for Graph Neural Networkscited by 8
- 2023Less Can Be More: Unsupervised Graph Pruning for Large-scale Dynamic Graphscited by 7
- 2023Fairness-aware Message Passing for Graph Neural Networkscited by 7
- 2024Distribution Consistency based Self-Training for Graph Neural Networks with Sparse Labelscited by 7
- 2024Addressing Shortcomings in Fair Graph Learning Datasets: Towards a New Benchmarkcited by 7
- 2024Robustness Inspired Graph Backdoor Defensecited by 7
- 2023Faithful and Consistent Graph Neural Network Explanations with Rationale Alignmentcited by 6
- 2023State of the Art and Potentialities of Graph-level Learningcited by 6
- 2024A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasurescited by 6
- 2024Promoting Fairness in Link Prediction with Graph Enhancementcited by 6
- 2022Sparse Vicious Attacks on Graph Neural Networkscited by 5
- 2023VertexSerum: Poisoning Graph Neural Networks for Link Inferencecited by 5
- 2023Certifiably Robust Graph Contrastive Learningcited by 5
- 2025DualEquiNet: A Dual-Space Hierarchical Equivariant Network for Large Biomoleculescited by 5
- 2022Privacy and Transparency in Graph Machine Learning: A Unified Perspectivecited by 4
- 2023Rethinking the Trigger-injecting Position in Graph Backdoor Attackcited by 4
- 2023Self-explainable Graph Neural Network for Alzheimer's Disease And Related Dementias Risk Predictioncited by 4
- 2023Generative Explanations for Graph Neural Network: Methods and Evaluationscited by 4
- 2023When Graph Neural Network Meets Causality: Opportunities, Methodologies and An Outlookcited by 4
- 2024Disambiguated Node Classification with Graph Neural Networkscited by 4
- 2024Multi-source Unsupervised Domain Adaptation on Graphs with Transferability Modelingcited by 4
- 2025Robustness questions the interpretability of graph neural networks: what to do?cited by 4
- 2025Unlearning Inversion Attacks for Graph Neural Networkscited by 4
50 most cited of 118 All 118 (JSON)
- 2026A Comparative Study of Counterfactual Explainers for Graph Neural Networks Enabling Multiple Types of Graph Edit4 Sep 2026
- 2026Faithful, Sufficient and Understandable: Rethinking Graph Counterfactual Explanations via Discrete Diffusion Inversion12 Aug 2026
- 2026Fairness in Link Prediction Beyond Demographic Parity: A Reproducibility Study10 Aug 2026
- 2026DeepFaith: Evidence-Grounded LLMs for Faithful Incident Reporting in Multi-Stage APT Defense27 Jul 2026
- 2026A Completion-Aware Framework for Impactful Counterfactual Explainability in Graph Neural Networks20 Jun 2026
- 2026Bayesian Membership Privacy for Graph Neural Networks2 Jun 2026
- 2026On the Safety of Graph Representation Learning7 May 2026
- 2026Robustness of Graph Self-Supervised Learning to Real-World Noise: A Case Study on Text-Driven Biomedical Graphs6 May 2026
- 2026COPYCOP: Ownership Verification for Graph Neural Networks6 May 2026
- 2026DeepXplain: XAI-Guided Autonomous Defense Against Multi-Stage APT Campaigns22 Mar 2026
- 2026Graph-Aware Stealthy Poison-Text Backdoors for Text-Attributed Graphs20 Mar 2026
- 2026Poisoning the Inner Prediction Logic of Graph Neural Networks for Clean-Label Backdoor Attacks5 Mar 2026
38 more
- 2026Quantifying Explanation Quality in Graph Neural Networks using Out-of-Distribution Generalization7 Feb 2026
- 2026CFRecs: Counterfactual Recommendations on Real Estate User Listing Interaction Graphs5 Feb 2026
- 2026Efficient Edge Rewiring Strategies for Enhancing PageRank Fairness23 Jan 2026
- 2026Impact of Graph Structure on Membership-Inference Risk for Graph Neural Networks23 Jan 2026
- 2026A Boolean Function-Theoretic Framework for Expressivity in GNNs with Applications to Fair Graph Mining19 Jan 2026
- 2026FairGU: Fairness-aware Graph Unlearning in Social Networks14 Jan 2026
- 2026FairGE: Fairness-Aware Graph Encoding in Incomplete Social Networks14 Jan 2026
- 2025Learning Invariant Graph Representations Through Redundant Information5 Dec 2025
- 2025Breaking the Dyadic Barrier: Rethinking Fairness in Link Prediction Beyond Demographic Parity9 Nov 2025
- 2025Cross-Paradigm Graph Backdoor Attacks with Promptable Subgraph Triggers26 Oct 2025
- 2025Backdoor or Manipulation? Graph Mixture of Experts Can Defend Against Various Graph Adversarial Attacks17 Oct 2025
- 2025Fair Minimum Labeling: Efficient Temporal Network Activations for Reachability and Equity4 Oct 2025
- 2025JANUS: A Dual-Constraint Generative Framework for Stealthy Node Injection Attacks16 Sep 2025
- 2025Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses27 Aug 2025
- 2025Exposing Privacy Risks in Graph Retrieval-Augmented Generation24 Aug 2025
- 2025Exploring the Secondary Risks of Large Language Models14 Jun 2025
- 2025Towards Multimodal Graph Large Language Model11 Jun 2025
- 2025DualEquiNet: A Dual-Space Hierarchical Equivariant Network for Large Biomolecules10 Jun 2025
- 2025WGLE:Backdoor-free and Multi-bit Black-box Watermarking for Graph Neural Networks10 Jun 2025
- 2025Do Explanations Increase the Risk of Decision Logic Leakage? Explanation-Guided Stealing of Graph Models3 Jun 2025
- 2025Unlearning Inversion Attacks for Graph Neural Networks1 Jun 2025
- 2025Is Your Explanation Reliable: Confidence-Aware Explanation on Graph Neural Networks31 May 2025
- 2025Finding Counterfactual Evidences for Node Classification16 May 2025
- 2025Enabling Group Fairness in Graph Unlearning via Bi-level Debiasing14 May 2025
- 2025Robustness questions the interpretability of graph neural networks: what to do?5 May 2025
- 2025Fairness in Augmented Graph Learning: A Survey30 Apr 2025
- 2025FedHERO: A Federated Learning Approach for Node Classification Task on Heterophilic Graphs29 Apr 2025
- 2025AuditVotes: Elevating Provable Defense for GNNs with Efficient Augmentation and Conditional Smoothing29 Mar 2025
- 2025β-GNN: A Robust Ensemble Approach Against Graph Structure Perturbation26 Mar 2025
- 2025Causal invariant geographic network representations with feature and structural distribution shifts25 Mar 2025
- 2025Efficient and Privacy-Preserved Link Prediction via Condensed Graphs15 Mar 2025
- 2025Node-level Contrastive Unlearning on Graph Neural Networks4 Mar 2025
- 2025LiSA: Leveraging Link Recommender to Attack Graph Neural Networks via Subgraph Injection13 Feb 2025
- 2025UniZyme: A Unified Protein Cleavage Site Predictor Enhanced with Enzyme Active-Site Knowledge10 Feb 2025
- 2024Prompt-based Unifying Inference Attack on Graph Neural Networks20 Dec 2024
- 2024Toward Fair Graph Neural Networks Via Dual-Teacher Knowledge Distillation30 Nov 2024
- 2024Stealing Training Graphs from Graph Neural Networks17 Nov 2024
- 2024WassFFed: Wasserstein Fair Federated Learning11 Nov 2024
50 newest of 118 All 118 (JSON)
- 2023Generative Diffusion Models on Graphs: Methods and Applicationscited by 79
- 2023D4Explainer: In-Distribution GNN Explanations via Discrete Denoising Diffusioncited by 9
- 2024Stealing Training Graphs from Graph Neural Networkscited by 3
- 2026Faithful, Sufficient and Understandable: Rethinking Graph Counterfactual Explanations via Discrete Diffusion Inversioncited by 1
- 2026Faithful, Sufficient and Understandable: Rethinking Graph Counterfactual Explanations via Discrete Diffusion Inversion12 Aug 2026
- 2024Stealing Training Graphs from Graph Neural Networks17 Nov 2024
- 2023D4Explainer: In-Distribution GNN Explanations via Discrete Denoising Diffusion30 Oct 2023
- 2023Generative Diffusion Models on Graphs: Methods and Applications6 Feb 2023
- 2025Exploring the Secondary Risks of Large Language Modelscited by 1
- 2025Exploring the Secondary Risks of Large Language Models14 Jun 2025
- 2023Graph Agent: Explicit Reasoning Agent for Graphscited by 8
- 2023Graph Agent: Explicit Reasoning Agent for Graphs25 Oct 2023
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trendscited by 88
- 2024Fairness in Large Language Models: A Taxonomic Surveycited by 57
- 2024A Survey of Graph Neural Networks in Real world: Imbalance, Noise, Privacy and OOD Challengescited by 54
- 2023Unnoticeable Backdoor Attacks on Graph Neural Networkscited by 45
- 2022Explaining the Explainers in Graph Neural Networks: a Comparative Studycited by 34
- 2022Global Concept-Based Interpretability for Graph Neural Networks via Neuron Analysiscited by 32
- 2022A Comprehensive Survey on Trustworthy Recommender Systemscited by 32
- 2024Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defensescited by 30
- 2023A Survey on Explainability of Graph Neural Networkscited by 28
- 2023Towards Fair Graph Neural Networks via Graph Counterfactualcited by 23
- 2023Counterfactual Learning on Graphs: A Surveycited by 22
- 2023A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applicationscited by 22
12 most cited of 107 All 107 (JSON)
- 2026A Comparative Study of Counterfactual Explainers for Graph Neural Networks Enabling Multiple Types of Graph Edit4 Sep 2026
- 2026Fairness in Link Prediction Beyond Demographic Parity: A Reproducibility Study10 Aug 2026
- 2026DeepFaith: Evidence-Grounded LLMs for Faithful Incident Reporting in Multi-Stage APT Defense27 Jul 2026
- 2026A Completion-Aware Framework for Impactful Counterfactual Explainability in Graph Neural Networks20 Jun 2026
- 2026Bayesian Membership Privacy for Graph Neural Networks2 Jun 2026
- 2026On the Safety of Graph Representation Learning7 May 2026
- 2026Robustness of Graph Self-Supervised Learning to Real-World Noise: A Case Study on Text-Driven Biomedical Graphs6 May 2026
- 2026COPYCOP: Ownership Verification for Graph Neural Networks6 May 2026
- 2026DeepXplain: XAI-Guided Autonomous Defense Against Multi-Stage APT Campaigns22 Mar 2026
- 2026Poisoning the Inner Prediction Logic of Graph Neural Networks for Clean-Label Backdoor Attacks5 Mar 2026
- 2026Quantifying Explanation Quality in Graph Neural Networks using Out-of-Distribution Generalization7 Feb 2026
- 2026CFRecs: Counterfactual Recommendations on Real Estate User Listing Interaction Graphs5 Feb 2026
12 newest of 107 All 107 (JSON)