{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,21]],"date-time":"2026-10-21T02:07:21Z","timestamp":1792548441361,"version":"4.5.0"},"reference-count":73,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2023,6,1]],"date-time":"2023-06-01T00:00:00Z","timestamp":1685577600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Pattern Anal. Mach. Intell."],"published-print":{"date-parts":[[2023,6,1]]},"DOI":"10.1109\/tpami.2022.3228315","type":"journal-article","created":{"date-parts":[[2022,12,12]],"date-time":"2022-12-12T19:44:53Z","timestamp":1670874293000},"page":"7308-7318","source":"Crossref","is-referenced-by-count":32,"title":["Differentially Private Graph Neural Networks for Whole-Graph Classification"],"prefix":"10.1109","volume":"45","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1818-1036","authenticated-orcid":false,"given":"Tamara T.","family":"Mueller","sequence":"first","affiliation":[{"name":"Department of Computer Science, Chair for AI in Medicine and Healthcare, Technical University of Munich, Munchen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Johannes C.","family":"Paetzold","sequence":"additional","affiliation":[{"name":"Department of Informatics, Technical University of Munich, Munchen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chinmay","family":"Prabhakar","sequence":"additional","affiliation":[{"name":"Department of Quantitative Bio Medicine, University of Zurich, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dmitrii","family":"Usynin","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Chair for AI in Medicine and Healthcare, Technical University of Munich, Munchen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5683-5889","authenticated-orcid":false,"given":"Daniel","family":"Rueckert","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Chair for AI in Medicine and Healthcare, Technical University of Munich, Munchen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8382-8062","authenticated-orcid":false,"given":"Georgios","family":"Kaissis","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Chair for AI in Medicine and Healthcare, Technical University of Munich, Munchen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2005.1555942"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.2693418"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313488"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-32254-0_54"},{"key":"ref5","article-title":"MedGCN: Graph convolutional networks for multiple medical tasks","author":"Mao","year":"2019"},{"key":"ref6","article-title":"Convolutional networks on graphs for learning molecular fingerprints","author":"Duvenaud","year":"2015"},{"key":"ref7","article-title":"Whole brain vessel graphs: A dataset and benchmark for graph learning and neuroscience","volume-title":"Proc. 35th Conf. Neural Inf. Process. Syst. Datasets Benchmarks Track","author":"Paetzold"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00192"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.media.2021.102233"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243834"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr42600.2020.00033"},{"key":"ref13","article-title":"Inverting Gradients\u2013How easy is it to break privacy in federated learning?","author":"Geiping","year":"2020"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/516"},{"key":"ref15","article-title":"Node-level membership inference attacks against graph neural networks","author":"He","year":"2021"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/tpsisa52974.2021.00002"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1561\/9781601988195"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-021-93030-0"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-021-00337-8"},{"key":"ref20","article-title":"Benchmarking differential privacy and federated learning for BERT models","author":"Basu","year":"2021"},{"key":"ref21","article-title":"Federated deep reinforcement learning","author":"Zhuo","year":"2019"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-22312-0_11"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1250790.1250803"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4939-2864-4_549"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36594-2_26"},{"key":"ref27","article-title":"Privacy-preserving graph convolutional networks for text classification","author":"Igamberdiev","year":"2021"},{"key":"ref28","article-title":"Semi-supervised classification with graph convolutional networks","author":"Kipf","year":"2016"},{"key":"ref29","article-title":"Node-level differentially private graph neural networks","author":"Daigavane","year":"2021"},{"key":"ref30","article-title":"Vertically federated graph neural network for privacy-preserving node classification","author":"Zhou","year":"2020"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484565"},{"key":"ref32","first-page":"6600","article-title":"Information obfuscation of graph neural networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Liao"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3264110"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3511975"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2017.11"},{"key":"ref36","article-title":"Semi-supervised knowledge transfer for deep learning from private training data","author":"Papernot","year":"2016"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14778\/3402707.3402749"},{"key":"ref38","article-title":"SoK: Differential privacy on graph-structured data","author":"Mueller","year":"2022"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1186\/1532-429X-15-46"},{"key":"ref40","volume-title":"Finger Prints","author":"Galton","year":"1892"},{"key":"ref41","volume-title":"Classification and Uses of Fingerprints London","author":"Henry","year":"1900"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/11527923_20"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89689-0_33"},{"key":"ref44","article-title":"TUDataset: A collection of benchmark datasets for learning with graphs","volume-title":"Proc. Workshop Graph Representation Learn. Beyond","author":"Morris"},{"key":"ref45","first-page":"22118","article-title":"Open graph benchmark: Datasets for machine learning on graphs","volume":"33","author":"Hu","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1039\/C7SC02664A"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1166\/jmihi.2018.2442"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1097\/RLI.0000000000000755"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/37402.37422"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.7287\/peerj.453v0.1\/reviews\/2"},{"key":"ref51","article-title":"Predict then propagate: Graph neural networks meet personalized pagerank","author":"Klicpera","year":"2018"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330925"},{"key":"ref53","article-title":"FLAG: Adversarial data augmentation for graph neural networks","author":"Kong","year":"2020"},{"key":"ref54","article-title":"Combining label propagation and simple models out-performs graph neural networks","author":"Huang","year":"2020"},{"key":"ref55","article-title":"Directional message passing for molecular graphs","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Klicpera"},{"key":"ref56","first-page":"1025","article-title":"Inductive representation learning on large graphs","volume-title":"Proc. 31st Int. Conf. Neural Inf. Process. Syst.","author":"Hamilton"},{"key":"ref57","article-title":"Graph attention networks","author":"Veli\u010dkovi\u0107","year":"2017"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1606.09375"},{"key":"ref59","article-title":"Unlocking high-accuracy differentially private image classification through scale","author":"De","year":"2022"},{"key":"ref60","article-title":"GNN explainer: A tool for post-hoc explanation of graph neural networks","author":"Ying","year":"2019"},{"issue":"2","key":"ref61","doi-asserted-by":"crossref","DOI":"10.29012\/jpc.689","article-title":"Differential privacy in practice: Expose your epsilons!","volume":"9","author":"Dwork","year":"2019","journal-title":"J. Privacy Confidentiality"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485252"},{"key":"ref63","article-title":"Toward robustness and privacy in federated learning: Experimenting with local and central differential privacy","author":"Naseri","year":"2020"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00044"},{"key":"ref65","article-title":"Explainability techniques for graph convolutional networks","author":"Baldassarre","year":"2019"},{"key":"ref66","article-title":"Contrastive graph neural network explanation","author":"Faber","year":"2020"},{"key":"ref67","first-page":"19620","article-title":"Parameterized explainer for graph neural network","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Luo"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/tkde.2022.3187455"},{"key":"ref69","article-title":"Automatic differentiation in pytorch","author":"Paszke","year":"2017"},{"key":"ref70","article-title":"Fast graph representation learning with PyTorch geometric","volume-title":"Proc. ICLR Workshop Representation Learn. Graphs Manifolds","author":"Fey"},{"key":"ref71","article-title":"functorch: JAX-like composable function transforms for pytorch","author":"Zou","year":"2021"},{"key":"ref72","first-page":"8024","article-title":"Pytorch: An imperative style, high-performance deep learning library","volume-title":"Advances in Neural Information Processing Systems","author":"Paszke","year":"2019"},{"key":"ref73","article-title":"GNNExplainer: Generating explanations for graph neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Ying"}],"container-title":["IEEE Transactions on Pattern Analysis and Machine Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/34\/10120646\/09980390.pdf?arnumber=9980390","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,6,25]],"date-time":"2024-06-25T19:54:17Z","timestamp":1719345257000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9980390\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,1]]},"references-count":73,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tpami.2022.3228315","relation":{},"ISSN":["0162-8828","2160-9292","1939-3539"],"issn-type":[{"value":"0162-8828","type":"print"},{"value":"2160-9292","type":"electronic"},{"value":"1939-3539","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,6,1]]}}}