{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T16:11:02Z","timestamp":1791389462237,"version":"4.3.3"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Japan Society for the Promotion of Science (JSPS) KAKENHI","award":["23K11072"],"award-info":[{"award-number":["23K11072"]}]},{"DOI":"10.13039\/501100004543","name":"China Scholarship Council Program","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004543","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3536612","type":"journal-article","created":{"date-parts":[[2025,1,29]],"date-time":"2025-01-29T13:46:47Z","timestamp":1738158407000},"page":"1949-1964","source":"Crossref","is-referenced-by-count":14,"title":["Protecting Your Attention During Distributed Graph Learning: Efficient Privacy-Preserving Federated Graph Attention Network"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-0162-5835","authenticated-orcid":false,"given":"Jinhao","family":"Zhou","sequence":"first","affiliation":[{"name":"Graduate School of Information, Production and Systems, Waseda University, Fukuoka, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2483-6980","authenticated-orcid":false,"given":"Jun","family":"Wu","sequence":"additional","affiliation":[{"name":"Graduate School of Information, Production and Systems, Waseda University, Fukuoka, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5639-0883","authenticated-orcid":false,"given":"Jianbing","family":"Ni","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Queen’s University, Kingston, ON, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3810-7076","authenticated-orcid":false,"given":"Yuntao","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-1485-058X","authenticated-orcid":false,"given":"Yanghe","family":"Pan","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6518-3130","authenticated-orcid":false,"given":"Zhou","family":"Su","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i6.16616"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3488560.3501396"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i5.16542"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3437963.3441720"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3080635"},{"issue":"20","key":"ref6","first-page":"10","article-title":"Graph attention networks","volume":"1050","author":"Velickovic","year":"2017","journal-title":"Stat"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3241057"},{"key":"ref8","article-title":"Federated dynamic GNN with secure aggregation","author":"Jiang","year":"2020","journal-title":"arXiv:2009.07351"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2023.3250264"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SmartCloud62736.2024.00011"},{"key":"ref11","first-page":"2669","article-title":"Stealing links from graph neural networks","volume-title":"Proc. USENIX Secur. Symp.","author":"He"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/11787006_1"},{"key":"ref13","first-page":"4961","article-title":"CrypTen: Secure multi-party computation meets machine learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Knott"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133982"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2023.119976"},{"key":"ref16","article-title":"FedGNN: Federated graph neural network for privacy-preserving recommendation","author":"Wu","year":"2021","journal-title":"arXiv:2102.04925"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93037-4_19"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484565"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3198283"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2021.3125565"},{"key":"ref21","first-page":"1291","article-title":"Updates-leak: Data set inference and reconstruction attacks in online learning","volume-title":"Proc. 29th Secur. Symp. (USENIX Security)","author":"Salem"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274740"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3448891.3448939"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/516"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833607"},{"key":"ref26","first-page":"19314","article-title":"Iterative deep graph learning for graph neural networks: Better and robust node embeddings","volume-title":"Proc. NIPS","volume":"33","author":"Chen"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3338501.3357370"},{"key":"ref28","first-page":"1595","article-title":"$PrivateFL$: Accurate, differentially private federated learning via personalized data transformation","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Secur.)","author":"Yang"},{"key":"ref29","first-page":"5052","article-title":"The Skellam mechanism for differentially private federated learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Agarwal"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3338501.3357371"},{"key":"ref31","article-title":"A generic framework for privacy preserving deep learning","author":"Ryffel","year":"2018","journal-title":"arXiv:1811.04017"},{"key":"ref32","article-title":"Scalable private learning with PATE","author":"Papernot","year":"2018","journal-title":"arXiv:1802.08908"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-57pt1r4"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-46766-1_34"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/11593447_13"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2988575"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2679189"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.12"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559358"},{"key":"ref40","first-page":"2165","article-title":"ABY2. 0: Improved mixed-protocol secure two-party computation","volume-title":"Proc. USENIX Secur. Symp.","author":"Patra"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N16-3020"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/276675.276685"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3411866"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539112"},{"key":"ref45","first-page":"394","article-title":"Improving the Gaussian mechanism for differential privacy: Analytical calibration and optimal denoising","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Balle"},{"key":"ref46","first-page":"3574","article-title":"Collecting telemetry data privately","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Ding"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1088\/1742-5468\/2008\/10\/P10008"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/10858070.pdf?arnumber=10858070","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,22]],"date-time":"2025-02-22T00:43:08Z","timestamp":1740184988000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10858070\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":47,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3536612","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}