Abstract:Graph neural networks (GNNs) are widely used in many applications. However, their robustness against adversarial attacks is criticized. Prior studies show that using unnoticeable modifications on graph topology or nodal features can significantly reduce the performances of GNNs. It is very challenging to design robust graph neural networks against poisoning attack and several efforts have been taken. Existing work aims at reducing the negative impact from adversarial edges only with the poisoned graph, which is sub-optimal since they fail to discriminate adversarial edges from normal ones. On the other hand, clean graphs from similar domains as the target poisoned graph are usually available in the real world. By perturbing these clean graphs, we create supervised knowledge to train the ability to detect adversarial edges so that the robustness of GNNs is elevated. However, such potential for clean graphs is neglected by existing work. To this end, we investigate a novel problem of improving the robustness of GNNs against poisoning attacks by exploring clean graphs. Specifically, we propose PA-GNN, which relies on a penalized aggregation mechanism that directly restrict the negative impact of adversarial edges by assigning them lower attention coefficients. To optimize PA-GNN for a poisoned graph, we design a meta-optimization algorithm that trains PA-GNN to penalize perturbations using clean graphs and their adversarial counterparts, and transfers such ability to improve the robustness of PA-GNN on the poisoned graph. Experimental results on four real-world datasets demonstrate the robustness of PA-GNN against poisoning attacks on graphs. Code and data are available here: <a class="link-external link-https" href="https://github.com/tangxianfeng/PA-GNN" rel="external noopener nofollow">this https URL</a>.

Data Poisoning Attack against Knowledge Graph Embedding

MaSS: Model-agnostic, Semantic and Stealthy Data Poisoning Attack on Knowledge Graph Embedding

Untargeted Adversarial Attack on Knowledge Graph Embeddings

Adversarial Robustness of Representation Learning for Knowledge Graphs

Performance Evaluation of Knowledge Graph Embedding Approaches under Non-adversarial Attacks

Reinforcement Learning For Data Poisoning on Graph Neural Networks

Curriculum Graph Poisoning

Indiscriminate Data Poisoning Attacks on Neural Networks

Unlearnable Graph: Protecting Graphs from Unauthorized Exploitation

Stronger Data Poisoning Attacks Break Data Sanitization Defenses

TPoison: Data-Poisoning Attack against GNN-Based Social Trust Model

Be Careful about Poisoned Word Embeddings: Exploring the Vulnerability of the Embedding Layers in NLP Models

Data-Agnostic Model Poisoning Against Federated Learning: A Graph Autoencoder Approach

Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embedding

Transferring Robustness for Graph Neural Network Against Poisoning Attacks

Data Poisoning Attacks on Regression Learning and Corresponding Defenses

Have You Poisoned My Data? Defending Neural Networks against Data Poisoning

MetaPoison: Practical General-purpose Clean-label Data Poisoning

Autoregressive Perturbations for Data Poisoning

Amplifying Membership Exposure via Data Poisoning

Poisoning Web-Scale Training Datasets is Practical