Adversarial Immunization for Certifiable Robustness on Graphs (2020-07-19T00:00:00.000000Z)

TL;DR

This paper proposes and forms the graph adversarial immunization problem, i.e., vaccinating an affordable fraction of node pairs, connected or unconnected, to improve the certifiable robustness of graph against any admissible adversarial attack and proposes an effective algorithm, called AdvImmune, which optimizes with meta-gradient in a discrete way to circumvent the computationally expensive combinatorial optimization when solving the adversarial Immunization problem.

Abstract

Despite achieving strong performance in semi-supervised node classification task, graph neural networks (GNNs) are vulnerable to adversarial attacks, similar to other deep learning models. Existing researches focus on developing either robust GNN models or attack detection methods against adversarial attacks on graphs. However, little research attention is paid to the potential and practice of immunization to adversarial attacks on graphs. In this paper, we propose and formulate the graph adversarial immunization problem, i.e., vaccinating an affordable fraction of node pairs, connected or unconnected, to improve the certifiable robustness of graph against any admissible adversarial attack. We further propose an effective algorithm, called AdvImmune, which optimizes with meta-gradient in a discrete way to circumvent the computationally expensive combinatorial optimization when solving the adversarial immunization problem. Experiments are conducted on two citation networks and one social network. Experimental results demonstrate that the proposed AdvImmune method remarkably improves the ratio of robust nodes by 12%, 42%, 65%, with an affordable immune budget of only 5% edges.

Authors

Huawei Shen

10 papers

Shuchang Tao

3 papers

Xueqi Cheng

8 papers

TL;DR

Abstract

Authors

References44 items

Efficient Robustness Certificates for Discrete Data: Sparsity-Aware Randomized Smoothing for Graphs, Images and More

Certifiable Robustness to Discrete Adversarial Perturbations for Factorization Machines

Certifiable Robustness of Graph Convolutional Networks under Structure Perturbations

Graph Structure Learning for Robust Graph Neural Networks

Scalable attack on graph data by injecting vicious nodes

Adversarial Attacks on Graph Neural Networks via Node Injections: A Hierarchical Reinforcement Learning Approach

A Survey of Adversarial Learning on Graphs

Adversarial Attacks and Defenses on Graphs: A Review and Empirical Study

Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing

All You Need Is Low (Rank): Defending Against Adversarial Attacks on Graphs

Certifiable Robustness to Graph Perturbations

Transferring Robustness for Graph Neural Network Against Poisoning Attacks

Graph Convolutional Networks using Heat Kernel for Semi-supervised Learning

Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment

Robust Graph Convolutional Networks Against Adversarial Attacks

GraphSAINT: Graph Sampling Based Inductive Learning Method

Certifiable Robustness and Robust Training for Graph Convolutional Networks

Popularity Prediction on Social Platforms with Coupled Graph Neural Networks

Topology Attack and Defense for Graph Neural Networks: An Optimization Perspective

A Persistent Weisfeiler-Lehman Procedure for Graph Classification

Adversarial Training Methods for Network Embedding

Graph Wavelet Neural Network

Adversarial Examples on Graph Data: Deep Insights into Attack and Defense

Attacking Graph-based Classification via Manipulating the Graph Structure

Adversarial Attacks on Graph Neural Networks via Meta Learning

Graph Adversarial Training: Dynamically Regularizing Based on Graph Structure

Graph Neural Networks for Social Recommendation

Adversarial Attack and Defense on Graph Data: A Survey

Bayesian graph convolutional neural networks for semi-supervised classification

Predict then Propagate: Graph Neural Networks meet Personalized PageRank

Adversarial Attacks on Node Embeddings via Graph Poisoning

Adaptive Sampling Towards Fast Graph Representation Learning

DeepInf: Social Influence Prediction with Deep Learning

Adversarial Attack on Graph Structured Data

Adversarial Attacks on Neural Networks for Graph Data

Graph Attention Networks

Inductive Representation Learning on Large Graphs

struc2vec: Learning Node Representations from Structural Identity

Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networks

Semi-Supervised Classification with Graph Convolutional Networks

Towards Evaluating the Robustness of Neural Networks

Community structure in social and biological networks

The PageRank Citation Ranking : Bringing Order to the Web

Comparing and detecting adversarial attacks for graph deep learning

Field of Study

Journal Information

Name

Venue Information

Name

Type

URL

Alternate Names