English
Related papers

Related papers: EvA: Evolutionary Attacks on Graphs

200 papers

Recently Graph Injection Attack (GIA) emerges as a practical attack scenario on Graph Neural Networks (GNNs), where the adversary can merely inject few malicious nodes instead of modifying existing nodes or edges, i.e., Graph Modification…

Machine Learning · Computer Science 2022-04-06 Yongqiang Chen , Han Yang , Yonggang Zhang , Kaili Ma , Tongliang Liu , Bo Han , James Cheng

Graph neural networks (GNNs) are becoming the de facto method to learn on the graph data and have achieved the state-of-the-art on node and graph classification tasks. However, recent works show GNNs are vulnerable to training-time…

Machine Learning · Computer Science 2025-03-25 Jiate Li , Meng Pang , Yun Dong , Binghui Wang

Deep Neural Networks (DNNs) in Computer Vision (CV) are well-known to be vulnerable to Adversarial Examples (AEs), namely imperceptible perturbations added maliciously to cause wrong classification results. Such variability has been a…

Cryptography and Security · Computer Science 2020-07-31 Yi Zeng , Han Qiu , Gerard Memmi , Meikang Qiu

Graph neural networks (GNNs) have attracted increasing interests. With broad deployments of GNNs in real-world applications, there is an urgent need for understanding the robustness of GNNs under adversarial attacks, especially in realistic…

Machine Learning · Computer Science 2021-06-22 Jiaqi Ma , Junwei Deng , Qiaozhu Mei

Graph neural networks (GNNs) offer promising learning methods for graph-related tasks. However, GNNs are at risk of adversarial attacks. Two primary limitations of the current evasion attack methods are highlighted: (1) The current…

Machine Learning · Computer Science 2023-02-08 He Zhang , Xingliang Yuan , Chuan Zhou , Shirui Pan

Graph neural networks (GNNs) achieve the state-of-the-art on graph-relevant tasks such as node and graph classification. However, recent works show GNNs are vulnerable to adversarial perturbations include the perturbation on edges, nodes,…

Cryptography and Security · Computer Science 2025-02-04 Jiate Li , Binghui Wang

Research has shown that deep neural networks (DNNs) have vulnerabilities that can lead to the misrecognition of Adversarial Examples (AEs) with specifically designed perturbations. Various adversarial attack methods have been proposed to…

Computer Vision and Pattern Recognition · Computer Science 2024-07-10 Ayane Tajima , Satoshi Ono

With the great popularity of Graph Neural Networks (GNNs), their robustness to adversarial topology attacks has received significant attention. Although many attack methods have been proposed, they mainly focus on fixed-budget attacks,…

Artificial Intelligence · Computer Science 2024-03-06 Mengmei Zhang , Xiao Wang , Chuan Shi , Lingjuan Lyu , Tianchi Yang , Junping Du

Graph Neural Networks (GNNs) are powerful tools in representation learning for graphs. However, recent studies show that GNNs are vulnerable to carefully-crafted perturbations, called adversarial attacks. Adversarial attacks can easily fool…

Machine Learning · Computer Science 2020-06-30 Wei Jin , Yao Ma , Xiaorui Liu , Xianfeng Tang , Suhang Wang , Jiliang Tang

Deep learning methods for graphs achieve remarkable performance across a variety of domains. However, recent findings indicate that small, unnoticeable perturbations of graph structure can catastrophically reduce performance of even the…

Machine Learning · Computer Science 2020-10-29 Xiang Zhang , Marinka Zitnik

Heterogeneous Graph Neural Networks (HGNNs) are increasingly recognized for their performance in areas like the web and e-commerce, where resilience against adversarial attacks is crucial. However, existing adversarial attack methods, which…

Machine Learning · Computer Science 2024-01-19 He Zhao , Zhiwei Zeng , Yongwei Wang , Deheng Ye , Chunyan Miao

Graph neural networks (GNNs) play a key role in learning representations from graph-structured data and are demonstrated to be useful in many applications. However, the GNN training pipeline has been shown to be vulnerable to node feature…

Machine Learning · Computer Science 2024-03-19 Tingting Tang , Yue Niu , Salman Avestimehr , Murali Annavaram

We study the black-box attacks on graph neural networks (GNNs) under a novel and realistic constraint: attackers have access to only a subset of nodes in the network, and they can only attack a small number of them. A node selection step is…

Machine Learning · Computer Science 2021-10-28 Jiaqi Ma , Shuangrui Ding , Qiaozhu Mei

Existing studies have shown that Message-Passing Graph Neural Networks (MPNNs) are highly susceptible to adversarial attacks. In contrast, despite the increasing importance of Graph Transformers (GTs), their robustness properties are…

Machine Learning · Computer Science 2026-04-14 Philipp Foth , Lukas Gosch , Simon Geisler , Leo Schwinn , Stephan Günnemann

Recent studies show that graph neural networks (GNNs) are vulnerable to backdoor attacks. Existing backdoor attacks against GNNs use fixed-pattern triggers and lack reasonable trigger constraints, overlooking individual graph…

Machine Learning · Computer Science 2025-03-13 Xuewen Dong , Jiachen Li , Shujun Li , Zhichao You , Qiang Qu , Yaroslav Kholodov , Yulong Shen

Evolutionary algorithms (EAs) have emerged as a powerful framework for optimization, especially for black-box optimization. Existing evolutionary algorithms struggle to comprehend and effectively utilize task-specific information for…

Neural and Evolutionary Computing · Computer Science 2024-12-24 Kai Wu , Xiaobin Li , Penghui Liu , Jing Liu

Graph Neural Networks (GNNs) are increasingly important given their popularity and the diversity of applications. Yet, existing studies of their vulnerability to adversarial attacks rely on relatively small graphs. We address this gap and…

Machine Learning · Computer Science 2023-05-02 Simon Geisler , Tobias Schmidt , Hakan Şirin , Daniel Zügner , Aleksandar Bojchevski , Stephan Günnemann

Graph Neural Networks (GNNs) have demonstrated remarkable utility across diverse applications, and their growing complexity has made Machine Learning as a Service (MLaaS) a viable platform for scalable deployment. However, this…

Machine Learning · Computer Science 2025-07-09 Zebin Wang , Menghan Lin , Bolin Shen , Ken Anderson , Molei Liu , Tianxi Cai , Yushun Dong

Deep neural networks (DNNs) have been showed to be highly vulnerable to imperceptible adversarial perturbations. As a complementary type of adversary, patch attacks that introduce perceptible perturbations to the images have attracted the…

Computer Vision and Pattern Recognition · Computer Science 2023-07-04 Zhaoyu Chen , Bo Li , Shuang Wu , Shouhong Ding , Wenqiang Zhang

Deep learning models for graphs have achieved strong performance for the task of node classification. Despite their proliferation, currently there is no study of their robustness to adversarial attacks. Yet, in domains where they are likely…

Machine Learning · Statistics 2021-12-10 Daniel Zügner , Amir Akbarnejad , Stephan Günnemann