Abstract:Graph learning methods have achieved remarkable performance in various domains such as social recommendation, financial fraud detection, and so on. In real applications, the underlying graph is often dynamically evolving and thus, some recent studies focus on integrating the temporal topology information of graphs into the GNN for learning graph embedding. However, the robustness of training GNNs for dynamic graphs has not been discussed so far. The major reason is how to attack dynamic graph embedding still remains largely untouched, let alone how to defend against the attacks. To enable robust training of GNNs for dynamic graphs, in this paper, we investigate the problem of how to generate attacks and defend against attacks for dynamic graph embedding. Attacking dynamic graph embedding is more challenging than attacking static graph embedding as we need to understand the temporal dynamics of graphs as well as its impact on the embedding and the injected perturbations should be distinguished from the natural evolution. In addition, the defense is very challenging as the perturbations may be hidden within the natural evolution. To tackle these technical challenges, in this paper, we first develop a novel gradient-based attack method from an optimization perspective to generate perturbations to fool dynamic graph learning methods, where a key idea is to use gradient dynamics to attack the natural dynamics of the graph. Further, we borrow the idea of the attack method and integrate it with adversarial training to train a more robust dynamic graph learning method to defend against hand-crafted attacks. Finally, extensive experiments on two real-world datasets demonstrate the effectiveness of the proposed attack and defense method, where our defense method not only achieves comparable performance on clean graphs but also significantly increases the defense performance on attacked graphs.

Towards Robust Community Detection Via Extreme Adversarial Attacks.

Unified Robust Network Embedding Framework for Community Detection via Extreme Adversarial Attacks

Robustness of Deep Learning Models on Graphs: A Survey

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Unsupervised Adversarially-Robust Representation Learning on Graphs

Blindfolded Attackers Still Threatening: Strict Black-Box Adversarial Attacks on Graphs.

Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing

Contrastive Deep Nonnegative Matrix Factorization for Community Detection

Community Detection Approach Via Graph Regularized Non-Negative Matrix Factorization

Multiscale Evolutionary Perturbation Attack on Community Detection

RobustECD: Enhancement of Network Structure for Robust Community Detection

Robust Graph Convolutional Networks Against Adversarial Attacks

Community Detection Method Based on Robust Semi-Supervised Nonnegative Matrix Factorization

Defending Adversarial Attacks in Graph Neural Networks Via Tensor Enhancement

Turning Strengths into Weaknesses: A Certified Robustness Inspired Attack Framework against Graph Neural Networks

RobustECD: Robust Enhancement for Community Detection in Complex Networks

Robustness of graph embedding methods for community detection

Adaptive Community Detection Incorporating Topology and Content in Social Networks

Adversarial Attack and Defense on Discrete Time Dynamic Graphs

Deep Insights into Graph Adversarial Learning: An Empirical Study Perspective.

An Algorithm Based on Non-Negative Matrix Factorization for Detecting Communities in Networks