arXiv:2506.11611cs.LG2025-06

不训练不调参,用内核复杂度识别并清除干扰边,提升GNN抗攻击能力。

KCES: Training-Free Defense for Robust Graph Neural Networks via Kernel Complexity

  • 基于图核复杂度计算每条边的破坏力得分
  • 在多个数据集上使GNN鲁棒性显著提升,超越现有方法
  • 可插件式接入其他防御方案,无需重新训练

图神经网络(GNN)在各类图任务中表现优异,但对微小、难以察觉的扰动和对抗攻击极为敏感。尽管已有多种防御方法,但多数依赖启发式指标,易过拟合特定攻击模式,且计算开销大。本文提出无需训练、模型无关的内核复杂度边净化(KCES)框架。KCES利用图核复杂度(GKC),一种从图的格拉姆矩阵导出的新指标,通过测试误差界刻画GNN泛化能力。基于GKC,为每条边定义了KC得分,衡量移除该边时GKC的变化量。高KC得分的边通常由对抗扰动生成,将其剪除可有效缓解其负面影响,从而增强GNN鲁棒性。KCES可无缝集成至现有防御策略中,作为即插即用模块,无需训练。理论分析与大量实验表明,KCES能持续提升GNN鲁棒性,优于当前最优基线,并显著增强已有防御效果,为保护GNN提供了一种原理性强且高效的解决方案。

原文摘要 · Abstract (English)

Graph Neural Networks (GNNs) have achieved impressive success across a wide range of graph-based tasks, yet they remain highly vulnerable to small, imperceptible perturbations and adversarial attacks. Although numerous defense methods have been proposed to address these vulnerabilities, many rely on heuristic metrics, overfit to specific attack patterns, and suffer from high computational complexity. In this paper, we propose Kernel Complexity-Based Edge Sanitization (KCES), a training-free, model-agnostic defense framework. KCES leverages Graph Kernel Complexity (GKC), a novel metric derived from the graph's Gram matrix that characterizes GNN generalization via its test error bound. Building on GKC, we define a KC score for each edge, measuring the change in GKC when the edge is removed. Edges with high KC scores, typically introduced by adversarial perturbations, are pruned to mitigate their harmful effects, thereby enhancing GNNs' robustness. KCES can also be seamlessly integrated with existing defense strategies as a plug-and-play module without requiring training. Theoretical analysis and extensive experiments demonstrate that KCES consistently enhances GNN robustness, outperforms state-of-the-art baselines, and amplifies the effectiveness of existing defenses, offering a principled and efficient solution for securing GNNs.

图神经网络对抗防御无训练

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。