Abstract:Recent studies have revealed that GNNs are highly susceptible to multiple adversarial attacks. Among these, graph backdoor attacks pose one of the most prominent threats, where attackers cause models to misclassify by learning the backdoored features with injected triggers and modified target labels during the training phase. Based on the features of the triggers, these attacks can be categorized into out-of-distribution (OOD) and in-distribution (ID) graph backdoor attacks, triggers with notable differences from the clean sample feature distributions constitute OOD backdoor attacks, whereas the triggers in ID backdoor attacks are nearly identical to the clean sample feature distributions. Existing methods can successfully defend against OOD backdoor attacks by comparing the feature distribution of triggers and clean samples but fail to mitigate stealthy ID backdoor attacks. Due to the lack of proper supervision signals, the main task accuracy is negatively affected in defending against ID backdoor attacks. To bridge this gap, we propose DMGNN against OOD and ID graph backdoor attacks that can powerfully eliminate stealthiness to guarantee defense effectiveness and improve the model performance. Specifically, DMGNN can easily identify the hidden ID and OOD triggers via predicting label transitions based on counterfactual explanation. To further filter the diversity of generated explainable graphs and erase the influence of the trigger features, we present a reverse sampling pruning method to screen and discard the triggers directly on the data level. Extensive experimental evaluations on open graph datasets demonstrate that DMGNN far outperforms the state-of-the-art (SOTA) defense methods, reducing the attack success rate to 5% with almost negligible degradation in model performance (within 3.5%).

EMHDRL: Adversarial Attacks on Graph Neural Networks via Hierarchical Reinforcement Learning

Devil in Disguise: Breaching Graph Neural Networks Privacy through Infiltration

Adversarial Attacks on Graph Neural Networks via Node Injections: A Hierarchical Reinforcement Learning Approach

Hierarchical Attacks on Large-Scale Graph Neural Networks.

Adversarial Attack on Graph Structured Data

HC-Ref: Hierarchical Constrained Refinement for Robust Adversarial Training of GNNs

A Hard Label Black-box Adversarial Attack Against Graph Neural Networks

Revisiting Adversarial Attacks on Graph Neural Networks for Graph Classification

Transferable Structure-based Adversarial Attack of Heterogeneous Graph Neural Network

Adversarial Detection on Graph Structured Data.

Graph Structure Reshaping Against Adversarial Attacks on Graph Neural Networks

Adversarial Attacks on Graph Neural Networks via Meta Learning

Adversarial Attacks on Graphs by Adding Fake Nodes

DMGNN: Detecting and Mitigating Backdoor Attacks in Graph Neural Networks

Reinforcement Learning For Data Poisoning on Graph Neural Networks

Top K Enhanced Reinforcement Learning Attacks on Heterogeneous Graph Node Classification

Adversarial Attack on Large Scale Graph

Grimm: A Plug-and-Play Perturbation Rectifier for Graph Neural Networks Defending against Poisoning Attacks

Unnoticeable Backdoor Attacks on Graph Neural Networks

Robustness-Inspired Defense Against Backdoor Attacks on Graph Neural Networks

Graph Agent Network: Empowering Nodes with Inference Capabilities for Adversarial Resilience