Book
Open access
Aug 2026
Defending against Model Extraction for GNNs with Model Reprogramming
This work proposes GraphRP (Graph Reprogramming Protection), a proactive defense framework that repurposes Model Reprogramming for security, and proves a lower bound on the attacker's estimation error that increases with the structural sensitivity of the reprogramming noise.
Yan Wen, Zhenyi Wang, Heng Huang
· Proceedings of the 32nd ACM... · 0 citations