图神经网络对抗攻击的防御策略

Lilapati Waikhom, Ripon Patgiri
{"title":"图神经网络对抗攻击的防御策略","authors":"Lilapati Waikhom, Ripon Patgiri","doi":"10.1109/SILCON55242.2022.10028958","DOIUrl":null,"url":null,"abstract":"Deep learning-based models have demonstrated exceptional performances in diverse fields. However, recent research has revealed that adversarial attacks and minor input perturbations may easily deceive DNNs. Graph Neural Networks (GNNs) inherit this weakness. An opponent can persuade GNNs to generate inaccurate predictions by influencing a few edges in the graph. It results in severe consequences of adopting GNNs in safety-critical applications. The research focus has shifted in recent years to make GNNs more robust to adversarial attacks. This article proposes GNN-Adv, a novel approach for defending against numerous attacks that disturb the graph structure during training. Experiments demonstrate that GNN-Adv surpasses current peer approaches by an average of 15 % across five GNN approaches, four datasets, and three defense techniques. Remarkably, GNNs-Adv can successfully restore their current performance in the face of terrifying, directly targeted attacks.","PeriodicalId":183947,"journal":{"name":"2022 IEEE Silchar Subsection Conference (SILCON)","volume":"55 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2022-11-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"GNN-Adv: Defence Strategy from Adversarial Attack for Graph Neural Network\",\"authors\":\"Lilapati Waikhom, Ripon Patgiri\",\"doi\":\"10.1109/SILCON55242.2022.10028958\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Deep learning-based models have demonstrated exceptional performances in diverse fields. However, recent research has revealed that adversarial attacks and minor input perturbations may easily deceive DNNs. Graph Neural Networks (GNNs) inherit this weakness. An opponent can persuade GNNs to generate inaccurate predictions by influencing a few edges in the graph. It results in severe consequences of adopting GNNs in safety-critical applications. The research focus has shifted in recent years to make GNNs more robust to adversarial attacks. This article proposes GNN-Adv, a novel approach for defending against numerous attacks that disturb the graph structure during training. Experiments demonstrate that GNN-Adv surpasses current peer approaches by an average of 15 % across five GNN approaches, four datasets, and three defense techniques. Remarkably, GNNs-Adv can successfully restore their current performance in the face of terrifying, directly targeted attacks.\",\"PeriodicalId\":183947,\"journal\":{\"name\":\"2022 IEEE Silchar Subsection Conference (SILCON)\",\"volume\":\"55 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2022-11-04\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2022 IEEE Silchar Subsection Conference (SILCON)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/SILCON55242.2022.10028958\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2022 IEEE Silchar Subsection Conference (SILCON)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/SILCON55242.2022.10028958","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 1

摘要

基于深度学习的模型在各个领域都表现出了优异的表现。然而,最近的研究表明,对抗性攻击和轻微的输入扰动可能很容易欺骗dnn。图神经网络(gnn)继承了这个弱点。对手可以通过影响图中的一些边来说服gnn生成不准确的预测。它会导致在安全关键应用中采用gnn的严重后果。近年来,研究重点已经转移到使gnn对对抗性攻击更加稳健。本文提出了GNN-Adv,这是一种在训练过程中防御干扰图结构的众多攻击的新方法。实验表明,在五种GNN方法、四种数据集和三种防御技术中,GNN- adv比目前的同类方法平均高出15%。值得注意的是,GNNs-Adv可以在面对可怕的直接攻击时成功恢复其当前性能。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
GNN-Adv: Defence Strategy from Adversarial Attack for Graph Neural Network
Deep learning-based models have demonstrated exceptional performances in diverse fields. However, recent research has revealed that adversarial attacks and minor input perturbations may easily deceive DNNs. Graph Neural Networks (GNNs) inherit this weakness. An opponent can persuade GNNs to generate inaccurate predictions by influencing a few edges in the graph. It results in severe consequences of adopting GNNs in safety-critical applications. The research focus has shifted in recent years to make GNNs more robust to adversarial attacks. This article proposes GNN-Adv, a novel approach for defending against numerous attacks that disturb the graph structure during training. Experiments demonstrate that GNN-Adv surpasses current peer approaches by an average of 15 % across five GNN approaches, four datasets, and three defense techniques. Remarkably, GNNs-Adv can successfully restore their current performance in the face of terrifying, directly targeted attacks.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信