safe-graph / Graph Adversarial Learning Literature
A curated list of adversarial attacks and defenses papers on graph-structured data.
Stars: ✭ 362
Projects that are alternatives of or similar to Graph Adversarial Learning Literature
Evalne
Source code for EvalNE, a Python library for evaluating Network Embedding methods.
Stars: ✭ 67 (-81.49%)
Mutual labels: graph-algorithms, data-mining
Alink
Alink is the Machine Learning algorithm platform based on Flink, developed by the PAI team of Alibaba computing platform.
Stars: ✭ 2,936 (+711.05%)
Mutual labels: data-mining, graph-algorithms
Gspan
Python implementation of frequent subgraph mining algorithm gSpan. Directed graphs are supported.
Stars: ✭ 103 (-71.55%)
Mutual labels: graph-algorithms, data-mining
Graph Fraud Detection Papers
A curated list of fraud detection papers using graph information or graph neural networks
Stars: ✭ 339 (-6.35%)
Mutual labels: graph-algorithms, data-mining
PracticalMachineLearning
A collection of ML related stuff including notebooks, codes and a curated list of various useful resources such as books and softwares. Almost everything mentioned here is free (as speech not free food) or open-source.
Stars: ✭ 60 (-83.43%)
Mutual labels: data-mining, graph-algorithms
Pydataroad
open source for wechat-official-account (ID: PyDataLab)
Stars: ✭ 302 (-16.57%)
Mutual labels: data-mining
Vivagraphjs
Graph drawing library for JavaScript
Stars: ✭ 3,442 (+850.83%)
Mutual labels: graph-algorithms
Surveykit
Android library to create beautiful surveys (aligned with ResearchKit on iOS)
Stars: ✭ 288 (-20.44%)
Mutual labels: survey
Text mining resources
Resources for learning about Text Mining and Natural Language Processing
Stars: ✭ 358 (-1.1%)
Mutual labels: data-mining
Suitesparse
The official SuiteSparse library: a suite of sparse matrix algorithms authored or co-authored by Tim Davis, Texas A&M University
Stars: ✭ 344 (-4.97%)
Mutual labels: graph-algorithms
Algods
Implementation of Algorithms and Data Structures, Problems and Solutions
Stars: ✭ 3,295 (+810.22%)
Mutual labels: graph-algorithms
Rspapers
A Curated List of Must-read Papers on Recommender System.
Stars: ✭ 4,140 (+1043.65%)
Mutual labels: survey
Ngraph.graph
Graph data structure in JavaScript
Stars: ✭ 295 (-18.51%)
Mutual labels: graph-algorithms
Artificial Adversary
🗣️ Tool to generate adversarial text examples and test machine learning models against them
Stars: ✭ 348 (-3.87%)
Mutual labels: data-mining
Sodsurvey
Salient Object Detection in the Deep Learning Era: An In-Depth Survey
Stars: ✭ 317 (-12.43%)
Mutual labels: survey
Pm4py Core
Public repository for the PM4Py (Process Mining for Python) project.
Stars: ✭ 313 (-13.54%)
Mutual labels: data-mining
Recommendation Systems Paperlist
Papers about recommendation systems that I am interested in
Stars: ✭ 308 (-14.92%)
Mutual labels: survey
Graph Adversarial Learning Literature
A curated list of adversarial attacks and defenses papers on graph-structured data.
Papers are sorted by their uploaded dates in descending order.
This bi-weekly-updated list serves as a complement of the survey below.
Adversarial Attack and Defense on Graph Data: A Survey (Updated in July 2020. More than 110 papers reviewed).
@article{sun2018adversarial,
title={Adversarial Attack and Defense on Graph Data: A Survey},
author={Sun, Lichao and Dou, Yingtong and Yang, Carl and Wang, Ji and Yu, Philip S. and Li, Bo},
journal={arXiv preprint arXiv:1812.10528},
year={2018}
}
If you feel this repo is helpful, please cite the survey above.
How to Search?
Search keywords like conference name (e.g., NeurIPS), task name (e.g., Link Prediction), model name (e.g., DeepWalk), or method name (e.g., Robust) over the webpage to quickly locate related papers.
Quick Links
Attack papers sorted by year: | 2021 | 2020 | 2019 | 2018 | 2017 |
Defense papers sorted by year: | 2021 | 2020 | 2019 | 2018 |
Attack
Attack Papers 2021
| Year | Title | Type | Target Task | Target Model | Venue | Paper | Code |
|---|---|---|---|---|---|---|---|
| 2021 | Adversarial Attack on Network Embeddings via Supervised Network Poisoning | Attack | Node Classification, Link Prediction | DeepWalk, Node2vec, LINE, GCN | PAKDD 2021 | Link | Link |
| 2021 | DeHiB: Deep Hidden Backdoor Attack on Semi-Supervised Learning via Adversarial Perturbation | Attack | AAAI 2021 | Link | Link | ||
| 2021 | GraphAttacker: A General Multi-Task Graph Attack Framework | Attack | Node Classification, Graph Classification, Link Prediction | GNNs | Arxiv | Link | Link |
| 2021 | Membership Inference Attack on Graph Neural Networks | Attack | Membership Inference | GNNs | Arxiv | Link | Link |
Attack Papers 2020 [Back to Top]
| Year | Title | Type | Target Task | Target Model | Venue | Paper | Code |
|---|---|---|---|---|---|---|---|
| 2020 | Membership Inference Attack on Graph Neural Networks | Attack | Node Classification | GNNs | ICDM 2020 | Link | Link |
| 2020 | Exploratory Adversarial Attacks on Graph Neural Networks | Attack | ICDM 2020 | Link | Link | ||
| 2020 | A Targeted Universal Attack on Graph Convolutional Network | Attack | Node Classification | GCN | Arxiv | Link | Link |
| 2020 | Attacking Graph-Based Classification without Changing Existing Connections | Attack | Node Classification | Collective Classification Models | ACSAC 2020 | Link | |
| 2020 | Learning to Deceive Knowledge Graph Augmented Models via Targeted Perturbation | Attack | Commonsense Reasoning Recommender System | Knowledge Graph | ICLR 2021 OpenReview | Link | Link |
| 2020 | One Vertex Attack on Graph Neural Networks-based Spatiotemporal Forecasting | Attack | Spatiotemporal Forecasting | GNNs | ICLR 2021 OpenReview | Link | |
| 2020 | Single-Node Attack for Fooling Graph Neural Networks | Attack | Node Classification | GNNs | ICLR 2021 OpenReview | Link | |
| 2020 | Black-Box Adversarial Attacks on Graph Neural Networks as An Influence Maximization Problem | Attack | Node Classification | GNNs | ICLR 2021 OpenReview | Link | |
| 2020 | Adversarial Attacks on Deep Graph Matching | Attack | Graph Matching | Deep Graph Matching Models | NeurIPS 2020 | Link | |
| 2020 | Towards More Practical Adversarial Attacks on Graph Neural Networks | Attack | Node Classification | GNNs | NeurIPS 2020 | Link | Link |
| 2020 | A Graph Matching Attack on Privacy-Preserving Record Linkage | Attack | Record Linkage | Rrivacy-preserving Record Linkage Methods | CIKM 2020 | Link | |
| 2020 | Adaptive Adversarial Attack on Graph Embedding via GAN | Attack | Node Classification | GCN, DeepWalk, LINE | SocialSec | Link | |
| 2020 | Scalable Adversarial Attack on Graph Neural Networks with Alternating Direction Method of Multipliers | Attack | Node Classification | GNNs | Arxiv | Link | |
| 2020 | Semantic-preserving Reinforcement Learning Attack Against Graph Neural Networks for Malware Detection | Attack | Malware Detection | GCN | Arxiv | Link | |
| 2020 | Adversarial Attack on Large Scale Graph | Attack | Node Classification | GNN | Arxiv | Link | |
| 2020 | Efficient Evasion Attacks to Graph Neural Networks via Influence Function | Attack | Node Classification | GNN | Arxiv | Link | |
| 2020 | Reinforcement Learning-based Black-Box Evasion Attacks to Link Prediction in Dynamic Graphs | Attack | Link Prediction | DyGCN | Arxiv | Link | |
| 2020 | Adversarial attack on BC classification for scale-free networks | Attack | Broido and Clauset classification | scale-free network | AIP Chaos | Link | |
| 2020 | Adversarial Attacks on Link Prediction Algorithms Based on Graph Neural Networks | Attack | Link Prediction | GNN | Asia CCS 2020 | Link | |
| 2020 | Practical Adversarial Attacks on Graph Neural Networks | Attack | Node Classification | GNN | ICML 2020 Workshop | Link | |
| 2020 | Link Prediction Adversarial Attack Via Iterative Gradient Attack | Attack | Link Prediction | GAE | IEEE TCSS | Link | |
| 2020 | An Efficient Adversarial Attack on Graph Structured Data | Attack | Node Classification | GCN | IJCAI 2020 Workshop | Link | |
| 2020 | Graph Backdoor | Attack | Node Classification Graph Classification | GNNs | USENIX Security 2021 | Link | |
| 2020 | Backdoor Attacks to Graph Neural Networks | Attack | Graph Classification | GNNs | Arxiv | Link | |
| 2020 | Robust Spammer Detection by Nash Reinforcement Learning | Attack | Fraud Detection | Graph-based Fraud Detector | KDD 2020 | Link | Link |
| 2020 | Adversarial Attacks on Graph Neural Networks: Perturbations and their Patterns | Attack | Node Classification | GNN | TKDD | Link | |
| 2020 | Adversarial Attack on Hierarchical Graph Pooling Neural Networks | Attack | Graph Classification | GNN | Arxiv | Link | |
| 2020 | Stealing Links from Graph Neural Networks | Attack | Inferring Link | GNNs | USENIX Security 2021 | Link | |
| 2020 | Scalable Attack on Graph Data by Injecting Vicious Nodes | Attack | Node Classification | GCN | ECML-PKDD 2020 | Link | |
| 2020 | Network disruption: maximizing disagreement and polarization in social networks | Attack | Manipulating Opinion | Graph Model, Social Network | Arxiv | Link | |
| 2020 | Adversarial Perturbations of Opinion Dynamics in Networks | Attack | Manipulating Opinion | Graph Model | Arxiv | Link | |
| 2020 | Non-target-specific Node Injection Attacks on Graph Neural Networks: A Hierarchical Reinforcement Learning Approach | Attack | Node Classification | GCN | WWW 2020 | Link | |
| 2020 | MGA: Momentum Gradient Attack on Network | Attack | Node Classification, Community Detection | GCN, DeepWalk, node2vec | Arxiv | Link | |
| 2020 | Indirect Adversarial Attacks via Poisoning Neighbors for Graph Convolutional Networks | Attack | Node Classification | GCN | BigData 2019 | Link | |
| 2020 | Graph Universal Adversarial Attacks: A Few Bad Actors Ruin Graph Learning Models | Attack | Node Classification | GCN | Arxiv | Link | Link |
| 2020 | Adversarial Attacks to Scale-Free Networks: Testing the Robustness of Physical Criteria | Attack | Network Structure | Physical Criteria | Arxiv | Link | |
| 2020 | Adversarial Attack on Community Detection by Hiding Individuals | Attack | Community Detection | GCN | WWW 2020 | Link | Link |
Attack Papers 2019 [Back to Top]
| Year | Title | Type | Target Task | Target Model | Venue | Paper | Code |
|---|---|---|---|---|---|---|---|
| 2019 | How Robust Are Graph Neural Networks to Structural Noise? | Attack | Node Structural Identity Prediction | GIN | Arxiv | Link | |
| 2019 | Time-aware Gradient Attack on Dynamic Network Link Prediction | Attack | Link Prediction | Dynamic Network Embedding Algs | Arxiv | Link | |
| 2019 | All You Need is Low (Rank): Defending Against Adversarial Attacks on Graphs | Attack | Node Classification | GCN, Tensor Embedding | WSDM 2020 | Link | Link |
| 2019 | αCyber: Enhancing Robustness of Android Malware Detection System against Adversarial Attacks on Heterogeneous Graph based Model | Attack | Malware Detection | HIN | CIKM 2019 | Link | |
| 2019 | A Unified Framework for Data Poisoning Attack to Graph-based Semi-supervised Learning | Attack | Semi-supervised Learning | Label Propagation | NeurIPS 2019 | Link | |
| 2019 | Manipulating Node Similarity Measures in Networks | Attack | Node Similarity | Node Similarity Measures | AAMAS 2020 | Link | |
| 2019 | Multiscale Evolutionary Perturbation Attack on Community Detection | Attack | Community Detection | Community Metrics | Arxiv | Link | |
| 2019 | Attacking Graph Convolutional Networks via Rewiring | Attack | Node Classification | GCN | Openreview | Link | |
| 2019 | Node Injection Attacks on Graphs via Reinforcement Learning | Attack | Node Classification | GCN | Arxiv | Link | |
| 2019 | A Restricted Black-box Adversarial Framework Towards Attacking Graph Embedding Models | Attack | Node Classification | GCN, SGC | AAAI 2020 | Link | Link |
| 2019 | Topology Attack and Defense for Graph Neural Networks: An Optimization Perspective | Attack | Node Classification | GNN | IJCAI 2019 | Link | Link |
| 2019 | Unsupervised Euclidean Distance Attack on Network Embedding | Attack | Node Embedding | GCN | Arxiv | Link | |
| 2019 | Generalizable Adversarial Attacks Using Generative Models | Attack | Node Classification | GCN | Arxiv | Link | |
| 2019 | Vertex Nomination, Consistent Estimation, and Adversarial Modification | Attack | Vertex Nomination | VN Scheme | Arxiv | Link | |
| 2019 | Data Poisoning Attack against Knowledge Graph Embedding | Attack | Fact Plausibility Prediction | TransE, TransR | IJCAI 2019 | Link | |
| 2019 | Adversarial Examples on Graph Data: Deep Insights into Attack and Defense | Attack | Node Classification | GCN | IJCAI 2019 | Link | Link |
| 2019 | Adversarial Attacks on Node Embeddings via Graph Poisoning | Attack | Node Classification, Community Detection | node2vec, DeepWalk, GCN, Spectral Embedding, Label Propagation | ICML 2019 | Link | Link |
| 2019 | Attacking Graph-based Classification via Manipulating the Graph Structure | Attack | Node Classification | Belief Propagation, GCN | CCS 2019 | Link | |
| 2019 | Adversarial Attacks on Graph Neural Networks via Meta Learning | Attack | Node Classification | GCN, CLN, DeepWalk | ICLR 2019 | Link | Link |
Attack Papers 2018 [Back to Top]
| Year | Title | Type | Target Task | Target Model | Venue | Paper | Code |
|---|---|---|---|---|---|---|---|
| 2018 | Poisoning Attacks to Graph-Based Recommender Systems | Attack | Recommender System | Graph-based Recommendation Algs | ACSAC 2018 | Link | |
| 2018 | GA Based Q-Attack on Community Detection | Attack | Community Detection | Modularity, Community Detection Alg | IEEE TCSS | Link | |
| 2018 | Data Poisoning Attack against Unsupervised Node Embedding Methods | Attack | Link Prediction | LINE, DeepWalk | Arxiv | Link | |
| 2018 | Attack Graph Convolutional Networks by Adding Fake Nodes | Attack | Node Classification | GCN | Arxiv | Link | |
| 2018 | Link Prediction Adversarial Attack | Attack | Link Prediction | GAE, GCN | Arxiv | Link | |
| 2018 | Attack Tolerance of Link Prediction Algorithms: How to Hide Your Relations in a Social Network | Attack | Link Prediction | Traditional Link Prediction Algs | Scientific Reports | Link | |
| 2018 | Attacking Similarity-Based Link Prediction in Social Networks | Attack | Link Prediction | local&global similarity metrics | AAMAS 2019 | Link | |
| 2018 | Fast Gradient Attack on Network Embedding | Attack | Node Classification | GCN | Arxiv | Link | |
| 2018 | Adversarial Attack on Graph Structured Data | Attack | Node Classification, Graph Classification | GNN, GCN | ICML 2018 | Link | Link |
| 2018 | Adversarial Attacks on Neural Networks for Graph Data | Attack | Node Classification | GCN | KDD 2018 | Link | Link |
| 2018 | Hiding individuals and communities in a social network | Attack | Community Detection | Community Detection Algs | Nature Human Behavior | Link | Link |
Attack Papers 2017 [Back to Top]
| Year | Title | Type | Target Task | Target Model | Venue | Paper | Code |
|---|---|---|---|---|---|---|---|
| 2017 | Practical Attacks Against Graph-based Clustering | Attack | Graph Clustering | SVD, node2vec, Community Detection Alg | CCS 2017 | Link | |
| 2017 | Adversarial Sets for Regularising Neural Link Predictors | Attack | Link Prediction | Knowledge Graph Embeddings | UAI 2017 | Link | Link |
Defense
Defense Papers 2021 [Back to Top]
| Year | Title | Type | Target Task | Target Model | Venue | Paper | Code |
|---|---|---|---|---|---|---|---|
| 2021 | Interpretable Stability Bounds for Spectral Graph Filters | Defense | Robustness Certification | Spectral Graph Filter | Arxiv | Link | |
| 2021 | Personalized privacy protection in social networks through adversarial modeling | Defense | Privacy Protection | GCN | AAAI 2021 | Link | |
| 2021 | Node Similarity Preserving Graph Convolutional Networks | Defense | Node Classification | GNNs | WSDM 2021 | Link | Link |
Defense Papers 2020 [Back to Top]
| Year | Title | Type | Target Task | Target Model | Venue | Paper | Code |
|---|---|---|---|---|---|---|---|
| 2020 | Smoothing Adversarial Training for GNN | Defense | Node Classification, Community Detection | GCN | IEEE TCSS | Link | |
| 2020 | Unsupervised Adversarially-Robust Representation Learning on Graphs | Defense | Node Classification | GNNs | Arxiv | Link | |
| 2020 | Provably Robust Node Classification via Low-Pass Message Passing | Defense | Node Classification | GNNs | ICDM 2020 | Link | |
| 2020 | Learning to Drop: Robust Graph Neural Network via Topological Denoising | Defense | Node Classification | GNNs | WSDM 2021 | Link | Link |
| 2020 | Robust Android Malware Detection Based on Attributed Heterogenous Graph Embedding | Defense | Malware Detection | Heterogeneous Information Network Embedding | FCS 2020 | Link | |
| 2020 | Adversarial Detection on Graph Structured Data | Defense | Graph Classification | GNNs | PPMLP 2020 | Link | |
| 2020 | On the Stability of Graph Convolutional Neural Networks under Edge Rewiring | Defense | Robustness Certification | GNNs | Arxiv | Link | |
| 2020 | Collective Robustness Certificates | Defense | Robustness Certification | GNNs | ICLR 2021 | Link | |
| 2020 | Towards Robust Graph Neural Networks against Label Noise | Defense | Node Classification | GNNs | ICLR 2021 OpenReview | Link | |
| 2020 | Certifying Robustness of Graph Laplacian Based Semi-Supervised Learning | Defense | Robustness Certification | GNNs | ICLR 2021 OpenReview | Link | |
| 2020 | Graph Adversarial Networks: Protecting Information against Adversarial Attacks | Defense | Node Attribute Inference | GNNs | ICLR 2021 OpenReview | Link | |
| 2020 | Ricci-GNN: Defending Against Structural Attacks Through a Geometric Approach | Defense | Node Classification | GNNs | ICLR 2021 OpenReview | Link | |
| 2020 | Graph Contrastive Learning with Augmentations | Defense | Node Classification | GNNs | NeurIPS 2020 | Link | Link |
| 2020 | Graph Information Bottleneck | Defense | Node Classification | GNNs | NeurIPS 2020 | Link | Link |
| 2020 | Certified Robustness of Graph Convolution Networks for Graph Classification under Topological Attacks | Defense | Graph Classification | GCN | NeurIPS 2020 | Link | Link |
| 2020 | Reliable Graph Neural Networks via Robust Aggregation | Defense | Node Classification | GNNs | NeurIPS 2020 | Link | Link |
| 2020 | Graph Random Neural Networks for Semi-Supervised Learning on Graphs | Defense | Node Classification | GCN | NeurIPS 2020 | Link | Link |
| 2020 | Variational Inference for Graph Convolutional Networks in the Absence of Graph Data and Adversarial Settings | Defense | Node Classification | GCN | NeurIPS 2020 | Link | Link |
| 2020 | GNNGuard: Defending Graph Neural Networks against Adversarial Attacks | Defense | Node Classification | GNNs | NeurIPS 2020 | Link | Link |
| 2020 | A Feature-Importance-Aware and Robust Aggregator for GCN | Defense | Node Classification Graph Classification | GNNs | CIKM 2020 | Link | Link |
| 2020 | Uncertainty-Matching Graph Neural Networks to Defend Against Poisoning Attacks | Defense | Node Classification | GNNs | AAAI 2021 | Link | |
| 2020 | Cross Entropy Attack on Deep Graph Infomax | Defense | Node Classification | DGI | IEEE ISCAS | Link | |
| 2020 | RoGAT: a robust GNN combined revised GAT with adjusted graphs | Defense | Node Classification | GNNs | Arxiv | Link | |
| 2020 | A Novel Defending Scheme for Graph-Based Classification Against Graph Structure Manipulating Attack | Defense | Node Classification | MRF | SocialSec | Link | |
| 2020 | Uncertainty-aware Attention Graph Neural Network for Defending Adversarial Attacks | Defense | Node Classification | GNNs | AAAI 2021 | Link | |
| 2020 | Certified Robustness of Graph Classification against Topology Attack with Randomized Smoothing | Defense | Graph Classification | GCB | IEEE GLOBECOM 2020 | Link | |
| 2020 | Certified Robustness of Graph Neural Networks against Adversarial Structural Perturbation | Defense | Robustness Certification | GNNs | Arxiv | Link | |
| 2020 | Adversarial Immunization for Improving Certifiable Robustness on Graphs | Defense | Node Classification | GNNs | WSDM 2021 | Link | |
| 2020 | Robust Collective Classification against Structural Attacks | Defense | Node Classification | Associative Markov Networks | UAI 2020 | Link | |
| 2020 | Enhancing Robustness of Graph Convolutional Networks via Dropping Graph Connections | Defense | Node Classification | GCN | Preprint | Link | |
| 2020 | Robust Training of Graph Convolutional Networks via Latent Perturbation | Defense | Node Classification | GCN | ECML-PKDD 2020 | Link | |
| 2020 | Backdoor Attacks to Graph Neural Networks | Defense | Graph Classification | GNNs | Arxiv | Link | |
| 2020 | DefenseVGAE: Defending against Adversarial Attacks on Graph Data via a Variational Graph Autoencoder | Defense | Node Classification | GNNs | Arxiv | Link | Link |
| 2020 | Robust Spammer Detection by Nash Reinforcement Learning | Defense | Fraud Detection | Graph-based Fraud Detector | KDD 2020 | Link | Link |
| 2020 | Certifiable Robustness of Graph Convolutional Networks under Structure Perturbations | Defense | Robustness Certification | GCN | KDD 2020 | Link | Link |
| 2020 | Efficient Robustness Certificates for Discrete Data: Sparsity-Aware Randomized Smoothing for Graphs, Images and More | Defense | Robustness Certification | GNN | ICML 2020 | Link | Link |
| 2020 | Robust Graph Representation Learning via Neural Sparsification | Defense | Node Classification | GNN | ICML 2020 | Link | |
| 2020 | EDoG: Adversarial Edge Detection For Graph Neural Networks | Defense | Edge Detection | GCN | Preprint | Link | |
| 2020 | Graph Structure Learning for Robust Graph Neural Networks | Defense | Node Classification | GCN | KDD 2020 | Link | Link |
| 2020 | GCN-Based User Representation Learning for Unifying Robust Recommendation and Fraudster Detection | Defense | Recommender System | GCN | SIGIR 2020 | Link | |
| 2020 | Anonymized GCN: A Novel Robust Graph Embedding Method via Hiding Node Position in Noise | Defense | Node Classification | GCN | Arxiv | Link | |
| 2020 | A Robust Hierarchical Graph Convolutional Network Model for Collaborative Filtering | Defense | Recommender System | GCN | Arxiv | Link | |
| 2020 | On The Stability of Polynomial Spectral Graph Filters | Defense | Graph Property | Spectral Graph Filter | ICASSP 2020 | Link | Link |
| 2020 | On the Robustness of Cascade Diffusion under Node Attacks | Defense | Influence Maximization | IC Model | WWW 2020 Workshop | Link | Link |
| 2020 | Friend or Faux: Graph-Based Early Detection of Fake Accounts on Social Networks | Defense | Fraud Detection | Graph-based Fraud Detectors | WWW 2020 | Link | |
| 2020 | Tensor Graph Convolutional Networks for Multi-relational and Robust Learning | Defense | Node Classification | GCN | Arxiv | Link | |
| 2020 | Adversary for Social Good: Protecting Familial Privacy through Joint Adversarial Attacks | Defense | Node Classification | Privacy Protection | AAAI 2020 | Link | |
| 2020 | Improving the Robustness of Wasserstein Embedding by Adversarial PAC-Bayesian Learning | Defense | Robustness Certification | Wasserstein Embedding | AAAI 2020 | Link | |
| 2020 | Adversarial Perturbations of Opinion Dynamics in Networks | Defense | Manipulating Opinion | Graph Model | Arxiv | Link | |
| 2020 | Topological Effects on Attacks Against Vertex Classification | Defense | Node Classification | GCN | Arxiv | Link | |
| 2020 | Towards an Efficient and General Framework of Robust Training for Graph Neural Networks | Defense | Node Classification | GCN | ICASSP 2020 | Link | |
| 2020 | Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing | Defense | Community Detection | Community Detection Algs | WWW 2020 | Link | |
| 2020 | Data Poisoning Attacks on Graph Convolutional Matrix Completion | Defense | Recommender System | GCMC | ICA3PP 2019 | Link |
Defense Papers 2019 [Back to Top]
| Year | Title | Type | Target Task | Target Model | Venue | Paper | Code |
|---|---|---|---|---|---|---|---|
| 2019 | How Robust Are Graph Neural Networks to Structural Noise? | Defense | Node Structural Identity Prediction | GIN | Arxiv | Link | |
| 2019 | GraphDefense: Towards Robust Graph Convolutional Networks | Defense | Node Classification | GCN | Arxiv | Link | |
| 2019 | All You Need is Low (Rank): Defending Against Adversarial Attacks on Graphs | Defense | Node Classification | GCN, Tensor Embedding | WSDM 2020 | Link | Link |
| 2019 | αCyber: Enhancing Robustness of Android Malware Detection System against Adversarial Attacks on Heterogeneous Graph based Model | Defense | Malware Detection | HIN | CIKM 2019 | Link | |
| 2019 | Edge Dithering for Robust Adaptive Graph Convolutional Networks | Defense | Node Classification | GCN | Arxiv | Link | |
| 2019 | GraphSAC: Detecting anomalies in large-scale graphs | Defense | Anomaly Detection | Anomaly Detection Algs | Arxiv | Link | |
| 2019 | Certifiable Robustness to Graph Perturbations | Defense | Robustness Certification | GNN | NeurIPS 2019 | Link | Link |
| 2019 | Power up! Robust Graph Convolutional Network based on Graph Powering | Defense | Node Classification | GCN | Openreview | Link | Link |
| 2019 | Adversarial Robustness of Similarity-Based Link Prediction | Defense | Link Prediction | Local Similarity Metrics | ICDM 2019 | Link | |
| 2019 | Adversarial Training Methods for Network Embedding | Defense | Node Classification | DeepWalk | WWW 2019 | Link | Link |
| 2019 | Transferring Robustness for Graph Neural Network Against Poisoning Attacks | Defense | Node Classification | GNN | WSDM 2020 | Link | Link |
| 2019 | Improving Robustness to Attacks Against Vertex Classification | Defense | Node Classification | GCN | KDD Workshop 2019 | Link | |
| 2019 | Target Defense Against Link-Prediction-Based Attacks via Evolutionary Perturbations | Defense | Link Prediction | Link Prediction Algs | TKDE | Link | |
| 2019 | Latent Adversarial Training of Graph Convolution Networks | Defense | Node Classification | GCN | [email protected] | Link | |
| 2019 | Certifiable Robustness and Robust Training for Graph Convolutional Networks | Defense | Robustness Certification | GCN | KDD 2019 | Link | Link |
| 2019 | Topology Attack and Defense for Graph Neural Networks: An Optimization Perspective | Defense | Node Classification | GNN | IJCAI 2019 | Link | Link |
| 2019 | Adversarial Examples on Graph Data: Deep Insights into Attack and Defense | Defense | Node Classification | GCN | IJCAI 2019 | Link | Link |
| 2019 | Adversarial Defense Framework for Graph Neural Network | Defense | Node Classification | GCN, GraphSAGE | Arxiv | Link | |
| 2019 | Investigating Robustness and Interpretability of Link Prediction via Adversarial Modifications | Defense | Link Prediction | Knowledge Graph Embedding | NAACL 2019 | Link | |
| 2019 | Robust Graph Convolutional Networks Against Adversarial Attacks | Defense | Node Classification | GCN | KDD 2019 | Link | Link |
| 2019 | Can Adversarial Network Attack be Defended? | Defense | Node Classification | GNN | Arxiv | Link | |
| 2019 | Virtual Adversarial Training on Graph Convolutional Networks in Node Classification | Defense | Node Classification | GCN | PRCV 2019 | Link | |
| 2019 | Batch Virtual Adversarial Training for Graph Convolutional Networks | Defense | Node Classification | GCN | [email protected] | Link | |
| 2019 | Comparing and Detecting Adversarial Attacks for Graph Deep Learning | Defense | Node Classification | GCN, GAT, Nettack | [email protected] 2019 | Link | |
| 2019 | Graph Adversarial Training: Dynamically Regularizing Based on Graph Structure | Defense | Node Classification | GCN | TKDE | Link | Link |
Defense Papers 2018 [Back to Top]
| Year | Title | Type | Target Task | Target Model | Venue | Paper | Code |
|---|---|---|---|---|---|---|---|
| 2018 | Characterizing Malicious Edges targeting on Graph Neural Networks | Defense | Detected Added Edges | GNN, GCN | OpenReview | Link | |
| 2018 | PeerNets: Exploiting Peer Wisdom Against Adversarial Attacks | Defense | Image Classification | LeNet, ResNet | ICLR 2019 | Link |
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].