Abstract:Graph Neural Networks (GNNs) have achieved state-of-the-art performance in various graph structure related tasks such as node classification and graph classification. However, GNNs are vulnerable to adversarial attacks. Existing works mainly focus on attacking GNNs for node classification; nevertheless, the attacks against GNNs for graph classification have not been well explored. In this work, we conduct a systematic study on adversarial attacks against GNNs for graph classification via perturbing the graph structure. In particular, we focus on the most challenging attack, i.e., hard label black-box attack, where an attacker has no knowledge about the target GNN model and can only obtain predicted labels through querying the target model.To achieve this goal, we formulate our attack as an optimization problem, whose objective is to minimize the number of edges to be perturbed in a graph while maintaining the high attack success rate. The original optimization problem is intractable to solve, and we relax the optimization problem to be a tractable one, which is solved with theoretical convergence guarantee. We also design a coarse-grained searching algorithm and a query-efficient gradient computation algorithm to decrease the number of queries to the target GNN model. Our experimental results on three real-world datasets demonstrate that our attack can effectively attack representative GNNs for graph classification with less queries and perturbations. We also evaluate the effectiveness of our attack under two defenses: one is well-designed adversarial graph detector and the other is that the target GNN model itself is equipped with a defense to prevent adversarial graph generation. Our experimental results show that such defenses are not effective enough, which highlights more advanced defenses.

Ergcn: Data Enhancement Based Robust Graph Convolutional Network for Node Classification

ERGCN: Data Enhancement-Based Robust Graph Convolutional Network Against Adversarial Attacks.

Robust Graph Convolutional Networks Against Adversarial Attacks

Certified Robustness of Graph Neural Networks against Adversarial Structural Perturbation

Robust graph learning with graph convolutional network

A Dual Robust Graph Neural Network Against Graph Adversarial Attacks

Robust Graph Convolutional Networks with Directional Graph Adversarial Training.

Bounding the Expected Robustness of Graph Neural Networks Subject to Node Feature Attacks

From Decoupling to Reconstruction: A Robust Graph Neural Network Against Topology Attacks.

Towards Robust Graph Convolution Network via Stochastic Activation

Learning Robust Node Representations on Graphs.

Adversarial Detection on Graph Structured Data.

Certifying Robustness of Graph Convolutional Networks for Node Perturbation with Polyhedra Abstract Interpretation

Robustness of Graph Classification: failure modes, causes, and noise-resistant loss in Graph Neural Networks

Robust Node Classification on Graph Data with Graph and Label Noise

Perturbation-augmented Graph Convolutional Networks: A Graph Contrastive Learning architecture for effective node classification tasks

Revisiting Adversarial Attacks on Graph Neural Networks for Graph Classification

A Hard Label Black-box Adversarial Attack Against Graph Neural Networks

HC-Ref: Hierarchical Constrained Refinement for Robust Adversarial Training of GNNs

AN-GCN: An Anonymous Graph Convolutional Network Against Edge-Perturbing Attacks

A Graph Neural Network-Based Node Classification Model on Class-Imbalanced Graph Data