Defending against Model Extraction for GNNs with Model Reprogramming
This work proposes GraphRP (Graph Reprogramming Protection), a proactive defense framework that repurposes Model Reprogramming for security, and proves a lower bound on the attacker's estimation error that increases with the structural sensitivity of the reprogramming noise.