Adversarial Attacks on Node Embeddings via Graph Poisoning
The goal of network representation learning is to learn low-dimensional node embeddings that capture the graph structure and are useful for solving downstream tasks. However, despite the proliferation of such methods, there is currently no study of their robustness to adversarial attacks. We provide the first adversarial vulnerability analysis on the widely used family of methods based on random walks. We derive efficient adversarial perturbations that poison the network structure and have a negative effect on both the quality of the embeddings and the downstream tasks. We further show that our attacks are transferable since they generalize to many models and are successful even when the attacker is restricted.
Code (1)
Tasks
Representation LearningSimilar Papers 제목 키워드 기반
Attacks on Node Attributes in Graph Neural Networks
Graphs are commonly used to model complex networks prevalent in modern social media and literacy applications. Our research investigates the vulnerability of these graphs through the application of feature based adversar…
Contrastive LearningHellaSwagAdversarial Attack on Network Embeddings via Supervised Network Poisoning
Learning low-level node embeddings using techniques from network representation learning is useful for solving downstream tasks such as node classification and link prediction. An important consideration in such applicat…
Adversarial AttackLink PredictionNetwork EmbeddingNode Classification+1Indirect Adversarial Attacks via Poisoning Neighbors for Graph Convolutional Networks
Graph convolutional neural networks, which learn aggregations over neighbor nodes, have achieved great performance in node classification tasks. However, recent studies reported that such graph convolutional node classif…
General ClassificationNode ClassificationAdversarial Attacks on Knowledge Graph Embeddings via Instance Attribution Methods
Despite the widespread use of Knowledge Graph Embeddings (KGE), little is known about the security vulnerabilities that might disrupt their intended behaviour. We study data poisoning attacks against KGE models for link …
Data PoisoningInterpretable Machine LearningKnowledge Graph EmbeddingsLink PredictionNode Injection Attacks on Graphs via Reinforcement Learning
Real-world graph applications, such as advertisements and product recommendations make profits based on accurately classify the label of the nodes. However, in such scenarios, there are high incentives for the adversarie…
Node Classificationreinforcement-learningReinforcement LearningReinforcement Learning (RL)