
OblivDGL: Oblivious Deep Graph Learning Made Practical
OblivDGL is a framework for secure GNN training and inference in machine-learning-as-a-service settings, modelled on Deep Graph Library. It uses an oblivious message passing paradigm and a new oblivious graph representation built on function secret sharing, revealing only the total node and edge counts. On four benchmark graphs it cuts training communication up to 1024x with up to 14.3x speedup, and inference communication up to 754x with 4.19x speedup.
What it claims
OblivDGL is a secure GNN training and inference framework from Yiming Qin, Xiaoning Liu, Shangqi Lai, Joseph K. Liu and Xingliang Yuan (contact at Monash). The authors argue that prior secure GNN protocols fail on three counts at once:
- They leak some graph information.
- They offer limited support for secure training.
- They scale poorly to large graphs.
OblivDGL's stated privacy guarantee is that it reveals nothing except the total node and edge counts. The authors call this the most stringent guarantee among prior secure GNN systems.
How it works
The abstract gives four design steps:
- It distills the secure computation patterns of GNNs into one generalized form, modelled on Deep Graph Library (DGL).
- An oblivious message passing paradigm runs over that form for both training and inference.
- A new oblivious graph representation implements the paradigm. It is built on function secret sharing (FSS), which the authors pick for its low latency.
- Tailored parallelization designs let the system process encrypted graphs at scale. The authors name this as a standout feature.
Evidence
The comparison is against "state-of-the-art secure GNN frameworks" on four benchmark graph datasets. The abstract names neither the baselines nor the datasets.
| Setting | Communication reduction | Runtime speedup |
|---|---|---|
| Secure training | up to 1024x | up to 14.3x |
| Secure inference | up to 754x | 4.19x |
All figures are maxima. Graph sizes, hardware and network settings are not given.
Limits
The page holds only the abstract and metadata. It does not give:
- the threat model, or the number of non-colluding servers that FSS normally assumes;
- the GNN architectures supported;
- accuracy relative to plaintext training;
- any code release.
The paper's status is listed as "Published elsewhere. Major revision. NDSS 2027." That means it is under major revision for NDSS 2027 and has not been accepted, so results may change. The ePrint version was received on 27 October 2026 and approved on 28 October 2026.
The paper is licensed CC BY-NC-ND. This restricts commercial reuse and derivative works of the text.
Organisations named here
- Monash University
- NDSS
Technologies named here
- OblivDGL
- Deep Graph Library
- function secret sharing
- graph neural network
Techniques named here
- Oblivious message passing
- Oblivious graph representation
- Function secret sharing
- Tailored parallelization
Related in research



