mlsanityData to 7 Oct 2026

Do Explanations Increase the Risk of Decision Logic Leakage? Explanation-Guided Stealing of Graph Models

arXiv 2506.03087 ↗First posted 3 Jun 2025cs.LG cs.AIcited by 1

Not on the map. Why?

Abstract (arXiv)

Graph Neural Networks (GNNs) have become essential tools for analyzing graph-structured data in domains such as drug discovery and financial analysis, leading to a growing demand for model transparency. Recent advances in explainable GNNs have addressed this need by revealing important subgraphs that influence predictions, but these explanation mechanisms may inadvertently expose these models to security risks. This paper investigates how such explanations potentially leak critical decision logic that can be exploited for model stealing. We propose method, a novel stealing framework that integrates explanation alignment for capturing decision logic with guided data augmentation for efficient training under limited queries, enabling effective replication of both the predictive behavior and underlying reasoning patterns of target models. Experiments on molecular graph datasets demonstrate that our approach shows advantages over conventional methods in model stealing. This work highlights important security considerations for the deployment of explainable GNNs in sensitive domains and suggests the need for protective measures against explanation-based attacks. Our code is available at https://github.com/beanmah/EGSteal.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 25 of its 45 references that are in the map. First posted on arXiv 3 Jun 2025.

Builds on

25 of 45 references.

References · 25

  1. 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,282
  2. 2017Graph Attention Networkscited by 8,854
  3. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
  4. 2017Inductive Representation Learning on Large Graphscited by 6,284
  5. 2018How Powerful are Graph Neural Networks?cited by 4,355
  6. 2015Learning Deep Features for Discriminative Localizationcited by 2,430
  7. 2019Strategies for Pre-training Graph Neural Networkscited by 964
  8. 2019GNNExplainer: Generating Explanations for Graph Neural Networkscited by 735
  9. 2022Recipe for a General, Powerful, Scalable Graph Transformercited by 702
  10. 2016Stealing Machine Learning Models via Prediction APIscited by 602
  11. 2020Graph Neural Networks in Recommender Systems: A Surveycited by 493
  12. 2020Parameterized Explainer for Graph Neural Networkcited by 423
13 more
  1. 2021On Explainability of Graph Neural Networks via Subgraph Explorationscited by 280
  2. 2019Explainability Techniques for Graph Convolutional Networkscited by 160
  3. 2020Interpreting Graph Neural Networks for NLP With Differentiable Edge Maskingcited by 152
  4. 2022Learning Causally Invariant Representations for Out-of-Distribution Generalization on Graphscited by 144
  5. 2022A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainabilitycited by 118
  6. 2021Causal Attention for Interpretable and Generalizable Graph Classificationcited by 108
  7. 2018Model Reconstruction from Model Explanationscited by 84
  8. 2021A Review on Graph Neural Network Methods in Financial Applicationscited by 77
  9. 2021Towards Self-Explainable Graph Neural Networkcited by 75
  10. 2020Model extraction from counterfactual explanationscited by 46
  11. 2020Model Extraction Attacks on Graph Neural Networks: Taxonomy and Realizationcited by 39
  12. 2021MEGEX: Data-Free Model Extraction Attack against Gradient-Based Explainable AIcited by 35
  13. 2022GREASE: Generate Factual and Counterfactual Explanations for GNN-based Recommendationscited by 22

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.