Abstract:Graph learning methods have achieved remarkable performance in various domains such as social recommendation, financial fraud detection, and so on. In real applications, the underlying graph is often dynamically evolving and thus, some recent studies focus on integrating the temporal topology information of graphs into the GNN for learning graph embedding. However, the robustness of training GNNs for dynamic graphs has not been discussed so far. The major reason is how to attack dynamic graph embedding still remains largely untouched, let alone how to defend against the attacks. To enable robust training of GNNs for dynamic graphs, in this paper, we investigate the problem of how to generate attacks and defend against attacks for dynamic graph embedding. Attacking dynamic graph embedding is more challenging than attacking static graph embedding as we need to understand the temporal dynamics of graphs as well as its impact on the embedding and the injected perturbations should be distinguished from the natural evolution. In addition, the defense is very challenging as the perturbations may be hidden within the natural evolution. To tackle these technical challenges, in this paper, we first develop a novel gradient-based attack method from an optimization perspective to generate perturbations to fool dynamic graph learning methods, where a key idea is to use gradient dynamics to attack the natural dynamics of the graph. Further, we borrow the idea of the attack method and integrate it with adversarial training to train a more robust dynamic graph learning method to defend against hand-crafted attacks. Finally, extensive experiments on two real-world datasets demonstrate the effectiveness of the proposed attack and defense method, where our defense method not only achieves comparable performance on clean graphs but also significantly increases the defense performance on attacked graphs.

Adversarial attack and defense on graph data: A survey

Robustness of Deep Learning Models on Graphs: A Survey

Adversarial Attack and Defense on Graph Data: A Survey

Blindfolded Attackers Still Threatening: Strict Black-Box Adversarial Attacks on Graphs.

Query-free Black-box Adversarial Attacks on Graphs

A Survey of Adversarial Learning on Graphs

Adversarial Attack on Graph Structured Data

Adversarial Attacks and Defenses in Images, Graphs and Text: A Review

Deep Insights into Graph Adversarial Learning: An Empirical Study Perspective.

Adversarial Detection on Graph Structured Data.

Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey

Adversarial Attacks and Defenses Against Deep Neural Networks: A Survey

A Survey on Adversarial Attacks and Defenses in Text

Adversarial Attack on Large Scale Graph

Adversarial Defense Framework for Graph Neural Network

DeepInsight: Topology Changes Assisting Detection of Adversarial Samples on Graphs

Adversarial Attacks and Defences: A Survey

Black-Box Adversarial Attack on Graph Neural Networks Based on Node Domain Knowledge.

Revisiting Adversarial Attacks on Graph Neural Networks for Graph Classification

Graph Universal Adversarial Attacks: A Few Bad Actors Ruin Graph Learning Models

Adversarial Attack and Defense on Discrete Time Dynamic Graphs