arXiv:2504.20848cs.LGcs.AI2025-04

针对图神经网络防御中的低度节点偏见,提出多视角增强防御策略。

Mitigating the Structural Bias in Graph Adversarial Defenses

  • 构建异构同构混合图,强化低度节点连接
  • 在基准数据集上显著提升低度节点防御效果
  • 适合关注图模型鲁棒性与公平性的研究者

近年来,图神经网络(GNN)在各类图结构任务中展现出巨大潜力。然而,现有研究发现,当前GNN易受恶意对抗攻击影响。尽管已有多种防御方法被提出以提升GNN鲁棒性,但它们在低度节点(即尾部节点)上的防御能力存在结构性偏差,类似传统GNN在干净图中的表现缺陷。为此,本文提出一种防御策略,包含异构-同构增强图构建、kNN增强图构建以及多视角节点级注意力模块,以缓解GNN在对抗攻击下的结构偏差。其中,异构-同构增强图通过全局移除异质链接(特征不相似节点间的边),并为低度节点添加同质链接(特征相似节点间的边)来实现。为进一步提升防御能力,引入注意力机制自适应融合两种图视图的表示。大量实验验证了该策略在基准数据集上的防御性能与去偏效果。

原文摘要 · Abstract (English)

In recent years, graph neural networks (GNNs) have shown great potential in addressing various graph structure-related downstream tasks. However, recent studies have found that current GNNs are susceptible to malicious adversarial attacks. Given the inevitable presence of adversarial attacks in the real world, a variety of defense methods have been proposed to counter these attacks and enhance the robustness of GNNs. Despite the commendable performance of these defense methods, we have observed that they tend to exhibit a structural bias in terms of their defense capability on nodes with low degree (i.e., tail nodes), which is similar to the structural bias of traditional GNNs on nodes with low degree in the clean graph. Therefore, in this work, we propose a defense strategy by including hetero-homo augmented graph construction, $k$NN augmented graph construction, and multi-view node-wise attention modules to mitigate the structural bias of GNNs against adversarial attacks. Notably, the hetero-homo augmented graph consists of removing heterophilic links (i.e., links connecting nodes with dissimilar features) globally and adding homophilic links (i.e., links connecting nodes with similar features) for nodes with low degree. To further enhance the defense capability, an attention mechanism is adopted to adaptively combine the representations from the above two kinds of graph views. We conduct extensive experiments to demonstrate the defense and debiasing effect of the proposed strategy on benchmark datasets.

图神经网络对抗防御结构偏见多视角学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。