Defending Graph Convolutional Networks Against Adversarial Attacks

The interconnection of social, email, and media platforms enables adversaries to manipulate networked data and promote their malicious intents. This paper introduces graph neural network architectures that are robust to perturbed networked data. The novel network utilizes a randomization layer that performs link-dithering (LD) by adding or removing links with probabilities selected to boost robustness. The resultant link-dithered auxiliary graphs are leveraged by an adaptive (A)GCN that performs SSL. The proposed robust LD-AGCN achieves performance gains relative to GCNs under perturbed network data.

[1]  Le Song,et al.  Adversarial Attack on Graph Structured Data , 2018, ICML.

[2]  Pierre Vandergheynst,et al.  Geometric Deep Learning: Going beyond Euclidean data , 2016, IEEE Signal Process. Mag..

[3]  Max Welling,et al.  Semi-Supervised Classification with Graph Convolutional Networks , 2016, ICLR.

[4]  Mikhail Belkin,et al.  Manifold Regularization: A Geometric Framework for Learning from Labeled and Unlabeled Examples , 2006, J. Mach. Learn. Res..

[5]  Alejandro Ribeiro,et al.  CONVOLUTIONAL NEURAL NETWORKS VIA NODE-VARYING GRAPH FILTERS , 2017, 2018 IEEE Data Science Workshop (DSW).

[6]  Pascal Frossard,et al.  The emerging field of signal processing on graphs: Extending high-dimensional data analysis to networks and other irregular domains , 2012, IEEE Signal Processing Magazine.

[7]  Charu C. Aggarwal,et al.  Outlier Analysis , 2013, Springer New York.

[8]  Georgios B. Giannakis,et al.  Kernel-based Inference of Functions over Graphs , 2017, ArXiv.

[9]  Robert Ulichney,et al.  Dithering with blue noise , 1988, Proc. IEEE.

[10]  Jure Leskovec,et al.  How Powerful are Graph Neural Networks? , 2018, ICLR.

[11]  Pietro Liò,et al.  Graph Attention Networks , 2017, ICLR.

[12]  Sijia Liu,et al.  Topology Attack and Defense for Graph Neural Networks: An Optimization Perspective , 2019, IJCAI.

[13]  Lise Getoor,et al.  Collective Classification in Network Data , 2008, AI Mag..

[14]  Georgios B. Giannakis,et al.  Pruned Graph Scattering Transforms , 2020, ICLR.

[15]  Stephan Günnemann,et al.  Adversarial Attacks on Neural Networks for Graph Data , 2018, KDD.

[16]  Jonathon Shlens,et al.  Explaining and Harnessing Adversarial Examples , 2014, ICLR.

[17]  Georgios B. Giannakis,et al.  GraphSAC: Detecting anomalies in large-scale graphs , 2019, ArXiv.

[18]  Geoffrey E. Hinton,et al.  Learning representations by back-propagating errors , 1986, Nature.

[19]  Santiago Segarra,et al.  Sampling of Graph Signals With Successive Local Aggregations , 2015, IEEE Transactions on Signal Processing.

[20]  Xavier Bresson,et al.  Convolutional Neural Networks on Graphs with Fast Localized Spectral Filtering , 2016, NIPS.