Abstract:Graph learning methods have achieved remarkable performance in various domains such as social recommendation, financial fraud detection, and so on. In real applications, the underlying graph is often dynamically evolving and thus, some recent studies focus on integrating the temporal topology information of graphs into the GNN for learning graph embedding. However, the robustness of training GNNs for dynamic graphs has not been discussed so far. The major reason is how to attack dynamic graph embedding still remains largely untouched, let alone how to defend against the attacks. To enable robust training of GNNs for dynamic graphs, in this paper, we investigate the problem of how to generate attacks and defend against attacks for dynamic graph embedding. Attacking dynamic graph embedding is more challenging than attacking static graph embedding as we need to understand the temporal dynamics of graphs as well as its impact on the embedding and the injected perturbations should be distinguished from the natural evolution. In addition, the defense is very challenging as the perturbations may be hidden within the natural evolution. To tackle these technical challenges, in this paper, we first develop a novel gradient-based attack method from an optimization perspective to generate perturbations to fool dynamic graph learning methods, where a key idea is to use gradient dynamics to attack the natural dynamics of the graph. Further, we borrow the idea of the attack method and integrate it with adversarial training to train a more robust dynamic graph learning method to defend against hand-crafted attacks. Finally, extensive experiments on two real-world datasets demonstrate the effectiveness of the proposed attack and defense method, where our defense method not only achieves comparable performance on clean graphs but also significantly increases the defense performance on attacked graphs.

Reinforcement Learning-based Black-Box Evasion Attacks to Link Prediction in Dynamic Graphs

Practicable Black-box Evasion Attacks on Link Prediction in Dynamic Graphs -- A Graph Sequential Embedding Method

Blindfolded Attackers Still Threatening: Strict Black-Box Adversarial Attacks on Graphs.

Link Prediction Adversarial Attack

Query-free Black-box Adversarial Attacks on Graphs

Time-aware Gradient Attack on Dynamic Network Link Prediction

DeepEC: Adversarial attacks against graph structure prediction models

Devil in Disguise: Breaching Graph Neural Networks Privacy through Infiltration

Black-box attacks on dynamic graphs via adversarial topology perturbations

Link Prediction Adversarial Attack Via Iterative Gradient Attack

Efficient, Direct, and Restricted Black-Box Graph Evasion Attacks to Any-Layer Graph Neural Networks via Influence Function

Evasion Attacks to Graph Neural Networks Via Influence Function.

Interpretable and Effective Reinforcement Learning for Attacking against Graph-based Rumor Detection

Link-Backdoor: Backdoor Attack on Link Prediction via Node Injection

Large Language Models for Link Stealing Attacks Against Graph Neural Networks

Stealing Links from Graph Neural Networks

Reinforcement Learning For Data Poisoning on Graph Neural Networks

Robust Temporal Link Prediction in Dynamic Complex Networks via Stable Gated Models With Reinforcement Learning

Adversarial link deception against the link prediction in complex networks

Adversarial Attack and Defense on Discrete Time Dynamic Graphs

Dyn-Backdoor: Backdoor Attack on Dynamic Link Prediction