Abstract:Graph learning methods have achieved remarkable performance in various domains such as social recommendation, financial fraud detection, and so on. In real applications, the underlying graph is often dynamically evolving and thus, some recent studies focus on integrating the temporal topology information of graphs into the GNN for learning graph embedding. However, the robustness of training GNNs for dynamic graphs has not been discussed so far. The major reason is how to attack dynamic graph embedding still remains largely untouched, let alone how to defend against the attacks. To enable robust training of GNNs for dynamic graphs, in this paper, we investigate the problem of how to generate attacks and defend against attacks for dynamic graph embedding. Attacking dynamic graph embedding is more challenging than attacking static graph embedding as we need to understand the temporal dynamics of graphs as well as its impact on the embedding and the injected perturbations should be distinguished from the natural evolution. In addition, the defense is very challenging as the perturbations may be hidden within the natural evolution. To tackle these technical challenges, in this paper, we first develop a novel gradient-based attack method from an optimization perspective to generate perturbations to fool dynamic graph learning methods, where a key idea is to use gradient dynamics to attack the natural dynamics of the graph. Further, we borrow the idea of the attack method and integrate it with adversarial training to train a more robust dynamic graph learning method to defend against hand-crafted attacks. Finally, extensive experiments on two real-world datasets demonstrate the effectiveness of the proposed attack and defense method, where our defense method not only achieves comparable performance on clean graphs but also significantly increases the defense performance on attacked graphs.

Adversarial Attacks Against Dynamic Graph Neural Networks Via Node Injection

Adversarial Attacks on Graph Neural Networks via Node Injections: A Hierarchical Reinforcement Learning Approach

GANI: Global Attacks on Graph Neural Networks Via Imperceptible Node Injections

TDGIA: Effective Injection Attacks on Graph Neural Networks

Maximizing Malicious Influence in Node Injection Attack.

Single Node Injection Label Specificity Attack on Graph Neural Networks Via Reinforcement Learning

Adversarial Attack on Large Scale Graph

Boosting Node Injection Attack with Graph Local Sparsity

Unveiling the Threat of Fraud Gangs to Graph Neural Networks: Multi-Target Graph Injection Attacks against GNN-Based Fraud Detectors

Adversarial Attack and Defense on Discrete Time Dynamic Graphs

A Practical Adversarial Attack on Graph Neural Networks by Attacking Single Node Structure

Hard Label Black Box Node Injection Attack on Graph Neural Networks

Imperceptible Graph Injection Attack on Graph Neural Networks

My Brother Helps Me: Node Injection Based Adversarial Attack on Social Bot Detection

Adversarial Camouflage for Node Injection Attack on Graphs

Query-based Adversarial Attacks on Graph with Fake Nodes

Node Injection for Class-specific Network Poisoning

Time-aware Gradient Attack on Dynamic Network Link Prediction

Adversarial Attack on Graph Structured Data

Adversarial Inter-Group Link Injection Degrades the Fairness of Graph Neural Networks