EdgeRefine: Privacy-Utility Balance for Graphs via Jaccard Sampling under Edge Differential Privacy
Not on the map. Why?
Abstract (arXiv)
Graph Neural Networks (GNNs) have shown considerable success in learning from graph-structured data, but their use in privacy-sensitive areas remains difficult because graph structure can leak sensitive link information. To satisfy edge-level differential privacy, a common approach is to inject noise into all elements of the graph's adjacency matrix, thereby obfuscating the existence of any single edge. However, stronger privacy requires more noise, and excessive noise reduces utility, making the privacy-utility balance a major barrier to practical privacy-preserving graph learning. To address this issue, we propose EdgeRefine, a local differential privacy framework that improves this trade-off through adaptive edge refinement. EdgeRefine first estimates edge-existence probabilities using Jaccard similarity and ranks edges for noisy edge removal. To ensure the sparsity and reliability of the final graph, it uses the privacy budget ε to determine the ratio of true to false edges, samples them separately based on this probability ranking, and controls the total number of edges with a separate sampling rate k. Extensive experiments show that EdgeRefine achieves accuracy comparable to the noise-free baseline and substantially outperforms other privacy-preserving methods across datasets and GNN architectures. Under privacy budget ε = 2.5, EdgeRefine improves node classification accuracy over state-of-the-art baselines by 17.8% on ACM under GAT and 19.7% on Cora under GCN. In graph classification, it achieves an average accuracy degradation of around 5% compared to the noise-free baseline. Under graph reconstruction attacks, EdgeRefine maintains relative absolute error levels above 1 across all privacy budgets, averaging 1.962 on Cora and 1.472 on AMAP, indicating strong resilience against privacy leakage.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 5 of its 50 references that are in the map. First posted on arXiv 9 Jul 2026.
Builds on
5 of 50 references.
References · 5
- 2018Pitfalls of Graph Neural Network Evaluationcited by 1,007
- 2022SoK: Differential Privacy on Graph-Structured Datacited by 10
- 2022Degree-Preserving Randomized Response for Graph Neural Networks under Local Differential Privacycited by 9
- 2025GNN-Suite: a Graph Neural Network Benchmarking Framework for Biomedical Informaticscited by 2
- 2024GraphPub: Generation of Differential Privacy Graph with High Availabilitycited by 1
Built on by
Not cited yet.