Research
On-device research index

arXiv research

A locally-built, LLM-digested index of recent arXiv papers in quant finance, geometry/topology, and statistical ML — keyword search served straight from SQLite on this machine.

168,742 papers · 148 categories

Trend · papers per month

10.4%20.7%31.1%41.5% · Jun 202019922001200920172026
48 results for graph adversarial training

Adversarial training improves graph autoencoder generalization.

problem Improving graph autoencoder generalization.
method Formulated L2 and L1 adversarial training for graph autoencoders and variational graph autoencoders.
result Adversarial training boosts graph autoencoder and variational graph autoencoder generalization.

Graph embedding is an effective method to represent graph data in a low dimensional space for graph analytics. Most existing embedding algorithms typically focus on preserving the topological structure or minimizing the reconstruction errors of graph data, but they have mostly ignored the data distribution of the laten…

2018-02-13abs ↗pdf ↗

Graph embedding aims to transfer a graph into vectors to facilitate subsequent graph analytics tasks like link prediction and graph clustering. Most approaches on graph embedding focus on preserving the graph structure or minimizing the reconstruction errors for graph data. They have mostly overlooked the embedding dis…

2019-01-04abs ↗pdf ↗

As a new approach to train generative models, \emph{generative adversarial networks} (GANs) have achieved considerable success in image generation. This framework has also recently been applied to data with graph structures. We propose labeled-graph generative adversarial networks (LGGAN) to train deep generative model…

2019-06-07abs ↗pdf ↗

DefenseVGAE defends graph neural networks against adversarial attacks.

problem Vulnerability of GNNs to adversarial structural perturbations.
method Variational Graph Autoencoder (VGAE) to reconstruct graph structure.
result DefenseVGAE reduces adversarial perturbations and boosts GCN performance.

Graph neural network (GNN), as a powerful representation learning model on graph data, attracts much attention across various disciplines. However, recent studies show that GNN is vulnerable to adversarial attacks. How to make GNN more robust? What are the key vulnerabilities in GNN? How to address the vulnerabilities …

2019-05-09abs ↗pdf ↗

We present batch virtual adversarial training (BVAT), a novel regularization method for graph convolutional networks (GCNs). BVAT addresses the shortcoming of GCNs that do not consider the smoothness of the model's output distribution against local perturbations around the input. We propose two algorithms, sample-based…

2019-02-25abs ↗pdf ↗

This paper examines how graph topology affects adversarial attacks on vertex classification.

problem Adversarial attacks on vertex classification are vulnerable to graph topology changes.
method Examined two topological graph characteristics and their impact on adversary perturbation budgets.
result Training sets including high-degree vertices or those ensuring all unlabeled nodes have neighbors can significantly increase the adversary's perturbation budget.

Paper defends sensitive attributes in GNNs from inference attacks.

problem Protecting sensitive attributes in GNNs from inference attacks.
method Proposes adversarial training with TV and Wasserstein distance to locally filter sensitive attributes.
result Framework creates strong defense against inference attacks with minimal performance loss.

We outline a detection method for adversarial inputs to deep neural networks. By viewing neural network computations as graphs upon which information flows from input space to out- put distribution, we compare the differences in graphs induced by different inputs. Specifically, by applying persistent homology to these …

2017-11-28abs ↗pdf ↗

Augments graph node features to improve GNN performance.

problem Improving graph neural networks' performance on large-scale datasets.
method Iteratively augments node features with gradient-based adversarial perturbations.
result Boosts model performance in node classification, link prediction, and graph classification tasks.

Graph-based framework for provably robust adversarial training.

problem Adversarial robustness of machine learning models.
method Formulates adversarial robustness as loss minimization with a Lipschitz constraint, using graph-based discretization and primal-dual algorithms.
result Establishes a connection between elliptic operators and adversarial learning, and proves fundamental lower bounds on adversarial sensitivity.

Adversarial approach has been widely used for data generation in the last few years. However, this approach has not been extensively utilized for classifier training. In this paper, we propose an adversarial framework for classifier training that can also handle imbalanced data. Indeed, a network is trained via an adve…

2018-11-21abs ↗pdf ↗

Efficient framework for robust training of GNNs against adversarial attacks.

problem Adversarial attacks on graph neural networks leading to incorrect predictions.
method Greedy search algorithms and zeroth-order methods for efficient robust training.
result Significantly less computationally expensive and more robust than state-of-the-art methods.

This paper explores vulnerabilities in hierarchical graph pooling neural networks for graph classification.

problem Vulnerability of hierarchical graph pooling neural networks in graph classification tasks.
method Proposes an adversarial attack framework using a surrogate model to generate adversarial samples.
result Adversarial samples can fool hierarchical GNN-based graph classification models, demonstrating their vulnerability.

Graph convolutional networks (GCNs) are powerful tools for graph-structured data. However, they have been recently shown to be vulnerable to topological attacks. To enhance adversarial robustness, we go beyond spectral graph theory to robust graph theory. By challenging the classical graph Laplacian, we propose a new c…

2019-05-24abs ↗pdf ↗

Recent methods for generating novel molecules use graph representations of molecules and employ various forms of graph convolutional neural networks for inference. However, training requires solving an expensive graph isomorphism problem, which previous approaches do not address or solve only approximately. In this wor…

2019-05-24abs ↗pdf ↗

Deep learning models for graphs have achieved strong performance for the task of node classification. Despite their proliferation, currently there is no study of their robustness to adversarial attacks. Yet, in domains where they are likely to be used, e.g. the web, adversaries are common. Can deep learning models for …

2018-05-21abs ↗pdf ↗

Study examines unsupervised and graph-based methods for anomaly detection in IoBT, outperformed by supervised stacking ensemble.

problem Anomaly detection in adversarial environments of IoBT.
method Unsupervised learning, graph-based methods, ensemble supervised learning, adversarial training.
result Supervised stacking ensemble method outperforms unsupervised and graph-based methods in detecting anomalies.

FairACE improves fairness in GNNs by balancing node performance across degree groups.

problem Degree biases in GNNs lead to unequal prediction performance among nodes with varying degrees.
method Integrates asymmetric contrastive learning with adversarial training to balance performance between high-degree and low-degree nodes.
result Significantly improves degree fairness metrics while maintaining competitive accuracy.

Pro-GNN defends graph neural networks from adversarial attacks by learning graph structure.

problem Vulnerability of GNNs to adversarial attacks on real-world graphs.
method Pro-GNN learns a structural graph and a robust GNN model jointly from perturbed graphs guided by intrinsic graph properties.
result Pro-GNN achieves significantly better performance than state-of-the-art defense methods, even on heavily perturbed graphs.

Bayesian optimisation method targets graph classification models against adversarial attacks.

problem Adversarial attacks on graph classification models, especially for graph-level tasks.
method Bayesian optimisation-based attack method for graph classification models.
result Effectiveness and flexibility of the proposed method validated on various graph classification tasks.

New black-box attack method improves GNN defense without needing training data.

problem Vulnerability of Graph Neural Networks to adversarial attacks.
method Developed a gradient-based black-box attack algorithm, BBGA, which does not require access to training data.
result BBGA achieves stable attack performance without accessing training sets, and is effective against various defenses.

I-GCN improves GCNs' robustness against adversarial attacks.

problem Adversarial attacks degrade GCNs' performance in security-critical applications.
method Influence mechanism divides node effects into introverted and extroverted influences.
result I-GCN achieves higher accuracy rates than state-of-the-art methods in defending against adversarial attacks.

AdvImmune improves certifiable robustness of GNNs against adversarial attacks.

problem Vulnerability of graph neural networks to adversarial attacks.
method Proposes AdvImmune, an algorithm that optimizes with meta-gradient to improve certifiable robustness.
result Remarkably improves the ratio of robust nodes by 12%, 42%, 65% with an affordable immune budget of only 5% edges.

The paper examines how neural network topology affects adversarial robustness.

problem Understanding how neural network topology influences adversarial robustness.
method Investigated the graph of input traversing all layers of a neural network, comparing clean and adversarial inputs.
result Under-optimized edges in neural network graphs are a source of adversarial vulnerability and can be used to detect adversarial inputs.

GNNGuard defends Graph Neural Networks against structural perturbations.

problem Adversarial attacks on graph neural networks can degrade performance catastrophically.
method Detects and quantifies the relationship between graph structure and node features, then uses this to mitigate attacks.
result GNNGuard outperforms existing defenses by 15.3% on average across various attacks and datasets.

Graphs can be fooled by small edge changes, but this work protects them.

problem Adversaries can manipulate graph data to mislead graph classification models.
method We introduce a smoothed graph classification model with a robustness guarantee.
result The smoothed model maintains consistent predictions under small adversarial perturbations.

advertorch is a toolbox for adversarial robustness research. It contains various implementations for attacks, defenses and robust training methods. advertorch is built on PyTorch (Paszke et al., 2017), and leverages the advantages of the dynamic computational graph to provide concise and efficient reference implementat…

2019-02-20abs ↗pdf ↗

Graph neural networks are vulnerable to adversarial attacks by manipulating graph structure.

problem Vulnerability of Graph Neural Networks to adversarial attacks.
method Categorization and review of existing attacks and defenses.
result Developed a repository for empirical studies on graph adversarial attacks and defenses.

Paper proposes a new method for predicting drug interactions using adversarial autoencoders.

problem Predicting drug interactions to prevent adverse events.
method Introduces adversarial autoencoders based on Wasserstein distances and Gumbel-Softmax relaxation to generate high-quality negative samples.
result Significant improvements in link prediction and DDI classification tasks.

Deep learning models for graphs have advanced the state of the art on many tasks. Despite their recent success, little is known about their robustness. We investigate training time attacks on graph neural networks for node classification that perturb the discrete graph structure. Our core principle is to use meta-gradi…

2019-02-22abs ↗pdf ↗