English
Related papers

Related papers: Adaptive Backdoor Attacks with Reasonable Constrai…

200 papers

Backdoor attacks pose a critical threat to the security of deep neural networks, yet existing efforts on universal backdoors often rely on visually salient patterns, making them easier to detect and less practical at scale. In this work, we…

Cryptography and Security · Computer Science 2026-03-03 Hsin Lin , Yan-Lun Chen , Ren-Hung Hwang , Chia-Mu Yu

Recent studies have shown that graph neural networks (GNNs) are vulnerable to adversarial attacks, posing significant challenges to their deployment in safety-critical scenarios. This vulnerability has spurred a growing focus on designing…

Machine Learning · Computer Science 2025-05-27 Tao Wu , Canyixing Cui , Xingping Xian , Shaojie Qiao , Chao Wang , Lin Yuan , Shui Yu

Graph Neural Networks (GNNs) have boosted the performance for many graph-related tasks. Despite the great success, recent studies have shown that GNNs are highly vulnerable to adversarial attacks, where adversaries can mislead the GNNs'…

Machine Learning · Computer Science 2022-11-23 Wenqi Fan , Wei Jin , Xiaorui Liu , Han Xu , Xianfeng Tang , Suhang Wang , Qing Li , Jiliang Tang , Jianping Wang , Charu Aggarwal

Graph Neural Networks (GNNs) have shown remarkable performance in various tasks. However, recent works reveal that GNNs are vulnerable to backdoor attacks. Generally, backdoor attack poisons the graph by attaching backdoor triggers and the…

Machine Learning · Computer Science 2024-07-15 Zhiwei Zhang , Minhua Lin , Enyan Dai , Suhang Wang

A cursory reading of the literature suggests that we have made a lot of progress in designing effective adversarial defenses for Graph Neural Networks (GNNs). Yet, the standard methodology has a serious flaw - virtually all of the defenses…

Machine Learning · Computer Science 2023-02-01 Felix Mujkanovic , Simon Geisler , Stephan Günnemann , Aleksandar Bojchevski

Graph neural networks (GNNs) achieve the state-of-the-art on graph-relevant tasks such as node and graph classification. However, recent works show GNNs are vulnerable to adversarial perturbations include the perturbation on edges, nodes,…

Cryptography and Security · Computer Science 2025-02-04 Jiate Li , Binghui Wang

Despite its success in the image domain, adversarial training did not (yet) stand out as an effective defense for Graph Neural Networks (GNNs) against graph structure perturbations. In the pursuit of fixing adversarial training (1) we show…

Machine Learning · Computer Science 2023-12-05 Lukas Gosch , Simon Geisler , Daniel Sturm , Bertrand Charpentier , Daniel Zügner , Stephan Günnemann

Existing studies have shown that Message-Passing Graph Neural Networks (MPNNs) are highly susceptible to adversarial attacks. In contrast, despite the increasing importance of Graph Transformers (GTs), their robustness properties are…

Machine Learning · Computer Science 2026-04-14 Philipp Foth , Lukas Gosch , Simon Geisler , Leo Schwinn , Stephan Günnemann

Backdoor attacks pose a significant security risk to graph learning models. Backdoors can be embedded into the target model by inserting backdoor triggers into the training dataset, causing the model to make incorrect predictions when the…

Cryptography and Security · Computer Science 2023-08-09 Zihan Guan , Mengnan Du , Ninghao Liu

End-to-end training with global optimization have popularized graph neural networks (GNNs) for node classification, yet inadvertently introduced vulnerabilities to adversarial edge-perturbing attacks. Adversaries can exploit the inherent…

Machine Learning · Computer Science 2024-12-12 Ao Liu , Wenshan Li , Tao Li , Beibei Li , Guangquan Xu , Pan Zhou , Wengang Ma , Hanyuan Huang

Graph neural networks (GNNs) are widely used in many applications. However, their robustness against adversarial attacks is criticized. Prior studies show that using unnoticeable modifications on graph topology or nodal features can…

Machine Learning · Computer Science 2020-02-27 Xianfeng Tang , Yandong Li , Yiwei Sun , Huaxiu Yao , Prasenjit Mitra , Suhang Wang

Graph Foundation Models (GFMs) are pre-trained on diverse source domains and adapted to unseen targets, enabling broad generalization for graph machine learning. Despite that GFMs have attracted considerable attention recently, their…

Cryptography and Security · Computer Science 2025-11-25 Jiayi Luo , Qingyun Sun , Lingjuan Lyu , Ziwei Zhang , Haonan Yuan , Xingcheng Fu , Jianxin Li

Graph neural network (GNN), as a powerful representation learning model on graph data, attracts much attention across various disciplines. However, recent studies show that GNN is vulnerable to adversarial attacks. How to make GNN more…

Machine Learning · Computer Science 2019-05-14 Shen Wang , Zhengzhang Chen , Jingchao Ni , Xiao Yu , Zhichun Li , Haifeng Chen , Philip S. Yu

Graph Neural Networks (GNNs) are increasingly important given their popularity and the diversity of applications. Yet, existing studies of their vulnerability to adversarial attacks rely on relatively small graphs. We address this gap and…

Machine Learning · Computer Science 2023-05-02 Simon Geisler , Tobias Schmidt , Hakan Şirin , Daniel Zügner , Aleksandar Bojchevski , Stephan Günnemann

With the great popularity of Graph Neural Networks (GNNs), their robustness to adversarial topology attacks has received significant attention. Although many attack methods have been proposed, they mainly focus on fixed-budget attacks,…

Artificial Intelligence · Computer Science 2024-03-06 Mengmei Zhang , Xiao Wang , Chuan Shi , Lingjuan Lyu , Tianchi Yang , Junping Du

Graph Neural Networks (GNNs) obtain tremendous success in modeling relational data. Still, they are prone to adversarial attacks, which are massive threats to applying GNNs to risk-sensitive domains. Existing defensive methods neither…

Machine Learning · Computer Science 2023-04-11 Beini Xie , Heng Chang , Ziwei Zhang , Xin Wang , Daixin Wang , Zhiqiang Zhang , Rex Ying , Wenwu Zhu

Recently backdoor attack has become an emerging threat to the security of deep neural network (DNN) models. To date, most of the existing studies focus on backdoor attack against the uncompressed model; while the vulnerability of compressed…

Cryptography and Security · Computer Science 2022-08-24 Huy Phan , Cong Shi , Yi Xie , Tianfang Zhang , Zhuohang Li , Tianming Zhao , Jian Liu , Yan Wang , Yingying Chen , Bo Yuan

Heterogeneous graph neural networks (HGNNs) have achieved strong performance in many real-world applications, yet targeted backdoor poisoning on heterogeneous graphs remains less studied. We consider backdoor attacks for heterogeneous node…

Machine Learning · Computer Science 2026-01-01 Honglin Gao , Lan Zhao , Junhao Ren , Xiang Li , Gaoxi Xiao

The success of graph neural networks stimulates the prosperity of graph mining and the corresponding downstream tasks including graph anomaly detection (GAD). However, it has been explored that those graph mining methods are vulnerable to…

Cryptography and Security · Computer Science 2023-07-18 Yulin Zhu , Yuni Lai , Kaifa Zhao , Xiapu Luo , Mingquan Yuan , Jun Wu , Jian Ren , Kai Zhou

Heterogeneous Graph Neural Networks (HGNNs) are increasingly recognized for their performance in areas like the web and e-commerce, where resilience against adversarial attacks is crucial. However, existing adversarial attack methods, which…

Machine Learning · Computer Science 2024-01-19 He Zhao , Zhiwei Zeng , Yongwei Wang , Deheng Ye , Chunyan Miao