Do Explanations Increase the Risk of Decision Logic Leakage? Explanation-Guided Stealing of Graph Models
Not on the map. Why?
Abstract (arXiv)
Graph Neural Networks (GNNs) have become essential tools for analyzing graph-structured data in domains such as drug discovery and financial analysis, leading to a growing demand for model transparency. Recent advances in explainable GNNs have addressed this need by revealing important subgraphs that influence predictions, but these explanation mechanisms may inadvertently expose these models to security risks. This paper investigates how such explanations potentially leak critical decision logic that can be exploited for model stealing. We propose method, a novel stealing framework that integrates explanation alignment for capturing decision logic with guided data augmentation for efficient training under limited queries, enabling effective replication of both the predictive behavior and underlying reasoning patterns of target models. Experiments on molecular graph datasets demonstrate that our approach shows advantages over conventional methods in model stealing. This work highlights important security considerations for the deployment of explainable GNNs in sensitive domains and suggests the need for protective measures against explanation-based attacks. Our code is available at https://github.com/beanmah/EGSteal.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 25 of its 45 references that are in the map. First posted on arXiv 3 Jun 2025.
Builds on
25 of 45 references.
References · 25
- 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,282
- 2017Graph Attention Networkscited by 8,854
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017Inductive Representation Learning on Large Graphscited by 6,284
- 2018How Powerful are Graph Neural Networks?cited by 4,355
- 2015Learning Deep Features for Discriminative Localizationcited by 2,430
- 2019Strategies for Pre-training Graph Neural Networkscited by 964
- 2019GNNExplainer: Generating Explanations for Graph Neural Networkscited by 735
- 2022Recipe for a General, Powerful, Scalable Graph Transformercited by 702
- 2016Stealing Machine Learning Models via Prediction APIscited by 602
- 2020Graph Neural Networks in Recommender Systems: A Surveycited by 493
- 2020Parameterized Explainer for Graph Neural Networkcited by 423
13 more
- 2021On Explainability of Graph Neural Networks via Subgraph Explorationscited by 280
- 2019Explainability Techniques for Graph Convolutional Networkscited by 160
- 2020Interpreting Graph Neural Networks for NLP With Differentiable Edge Maskingcited by 152
- 2022Learning Causally Invariant Representations for Out-of-Distribution Generalization on Graphscited by 144
- 2022A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainabilitycited by 118
- 2021Causal Attention for Interpretable and Generalizable Graph Classificationcited by 108
- 2018Model Reconstruction from Model Explanationscited by 84
- 2021A Review on Graph Neural Network Methods in Financial Applicationscited by 77
- 2021Towards Self-Explainable Graph Neural Networkcited by 75
- 2020Model extraction from counterfactual explanationscited by 46
- 2020Model Extraction Attacks on Graph Neural Networks: Taxonomy and Realizationcited by 39
- 2021MEGEX: Data-Free Model Extraction Attack against Gradient-Based Explainable AIcited by 35
- 2022GREASE: Generate Factual and Counterfactual Explanations for GNN-based Recommendationscited by 22
Built on by
Citing papers per year: 2026: 1.
1 paper.
- 2026GNN Explanations that do not Explain and How to find Them28 Jan 2026