A General Black-box Adversarial Attack on Graph-based Fake News Detectors
Graph Neural Network (GNN)-based fake news detectors apply various methods to construct graphs, aiming to learn distinctive news embeddings for classification. Since the construction details are unknown for attackers in a black-box scenario, it is unrealistic to conduct the classical adversarial attacks that require a specific adjacency matrix. In this paper, we propose the first general black-box adversarial attack framework, i.e., General Attack via Fake Social Interaction (GAFSI), against detectors based on different graph structures. Specifically, as sharing is an important social interaction for GNN-based fake news detectors to construct the graph, we simulate sharing behaviors to fool the detectors. Firstly, we propose a fraudster selection module to select engaged users leveraging local and global information. In addition, a post injection module guides the selected users to create shared relations by sending posts. The sharing records will be added to the social context, leading to a general attack against different detectors. Experimental results on empirical datasets demonstrate the effectiveness of GAFSI.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial AttackGraph Neural NetworkSimilar Papers 제목 키워드 기반
Knowledge-enhanced Black-box Attacks for Recommendations
Recent studies have shown that deep neural networks-based recommender systems are vulnerable to adversarial attacks, where attackers can inject carefully crafted fake user profiles (i.e., a set of items that fake users h…
AttributeDeep Reinforcement LearningRecommendation SystemsRestricted Black-box Adversarial Attack Against DeepFake Face Swapping
DeepFake face swapping presents a significant threat to online security and social media, which can replace the source face in an arbitrary photo/video with the target face of an entirely different person. In order to pr…
Adversarial AttackFace ReconstructionFace SwappingGenerative Adversarial NetworkD4: Detection of Adversarial Diffusion Deepfakes Using Disjoint Ensembles
Detecting diffusion-generated deepfake images remains an open problem. Current detection methods fail against an adversary who adds imperceptible adversarial perturbations to the deepfake to evade detection. In this work…
Adversarial RobustnessDeepFake DetectionFace SwappingLog-normal Mutations and their Use in Detecting Surreptitious Fake Images
In many cases, adversarial attacks are based on specialized algorithms specifically dedicated to attacking automatic image classifiers. These algorithms perform well, thanks to an excellent ad hoc distribution of initial…
Cluster Attack: Query-based Adversarial Attacks on Graphs with Graph-Dependent Priors
While deep neural networks have achieved great success in graph analysis, recent work has shown that they are vulnerable to adversarial attacks. Compared with adversarial attacks on image classification, performing adver…
Adversarial AttackClusteringGraph Clusteringimage-classification+2