Adversarial Attacks on Graph Classification via Bayesian Optimisation
Graph neural networks, a popular class of models effective in a wide range of graph-based learning tasks, have been shown to be vulnerable to adversarial attacks. While the majority of the literature focuses on such vulnerability in node-level classification tasks, little effort has been dedicated to analysing adversarial attacks on graph-level classification, an important problem with numerous real-life applications such as biochemistry and social network analysis. The few existing methods often require unrealistic setups, such as access to internal information of the victim models, or an impractically-large number of queries. We present a novel Bayesian optimisation-based attack method for graph classification models. Our method is black-box, query-efficient and parsimonious with respect to the perturbation applied. We empirically validate the effectiveness and flexibility of the proposed method on a wide range of graph classification tasks involving varying graph properties, constraints and modes of attack. Finally, we analyse common interpretable patterns behind the adversarial samples produced, which may shed further light on the adversarial robustness of graph classification models.
Code (1)
Tasks
Adversarial RobustnessBayesian OptimisationClassificationGraph ClassificationSimilar Papers 제목 키워드 기반
Adversarial Attacks on Graph Classifiers via Bayesian Optimisation
Graph neural networks, a popular class of models effective in a wide range of graph-based learning tasks, have been shown to be vulnerable to adversarial attacks. While the majority of the literature focuses on such vuln…
Adversarial RobustnessBayesian OptimisationClassificationGraph ClassificationAttacking Graph Classification via Bayesian Optimisation
Graph neural networks have been shown to be vulnerable to adversarial attacks. While the majority of the literature focuses on such vulnerability in node-level classification tasks, little effort has been dedicated to at…
Adversarial RobustnessBayesian OptimisationClassificationGraph ClassificationSparse Adversarial Video Attacks with Spatial Transformations
In recent years, a significant amount of research efforts concentrated on adversarial attacks on images, while adversarial video attacks have seldom been explored. We propose an adversarial attack strategy on videos, cal…
Adversarial AttackBayesian OptimisationSSIMBayesOpt Adversarial Attack
Black-box adversarial attacks require a large number of attempts before finding successful adversarial examples that are visually indistinguishable from the original input. Current approaches relying on substitute model …
Adversarial AttackBayesian OptimisationDimensionality ReductionModel SelectionHow to beat a Bayesian adversary
Deep neural networks and other modern machine learning models are often susceptible to adversarial attacks. Indeed, an adversary may often be able to change a model's prediction through a small, directed perturbation of …
Adversarial Robustness