arXiv:2510.11584cs.CLcs.CR2025-10被引 1

用大模型生成可解释的对抗攻击,提升知识图谱嵌入的鲁棒性测试能力

LLMAtKGE: Large Language Models as Explainable Attackers against Knowledge Graph Embeddings

  • 利用大模型结合结构与文本信息选择攻击目标
  • 在两个数据集上超越最强黑盒基线,接近白盒效果
  • 自动生成推理过程解释,适合安全评估与模型审计

针对知识图谱嵌入(KGE)的对抗攻击旨在通过删除或插入三元组破坏链接预测能力。现有黑盒方法虽融合了文本与结构信息,但无法生成可读解释且泛化性差。本文提出LLMAtKGE,一种基于大语言模型的新型框架,能选择攻击目标并生成人类可读的解释。为在有限输入下提供充分事实背景,设计结构化提示策略,将攻击任务转化为多选题形式,并融入知识图谱事实证据。针对上下文窗口限制和模型犹豫问题,引入语义与中心性过滤器,在保留高召回率的同时压缩候选集。为高效整合语义与结构信息,预计算高阶邻接矩阵并微调大模型完成三元组分类任务以增强过滤性能。在两个主流知识图谱数据集上的实验表明,该攻击优于最强黑盒基线,且解释能力显著,表现接近白盒方法。消融实验与案例研究进一步验证其生成解释的能力。

原文摘要 · Abstract (English)

Adversarial attacks on knowledge graph embeddings (KGE) aim to disrupt the model's ability of link prediction by removing or inserting triples. A recent black-box method has attempted to incorporate textual and structural information to enhance attack performance. However, it is unable to generate human-readable explanations, and exhibits poor generalizability. In the past few years, large language models (LLMs) have demonstrated powerful capabilities in text comprehension, generation, and reasoning. In this paper, we propose LLMAtKGE, a novel LLM-based framework that selects attack targets and generates human-readable explanations. To provide the LLM with sufficient factual context under limited input constraints, we design a structured prompting scheme that explicitly formulates the attack as multiple-choice questions while incorporating KG factual evidence. To address the context-window limitation and hesitation issues, we introduce semantics-based and centrality-based filters, which compress the candidate set while preserving high recall of attack-relevant information. Furthermore, to efficiently integrate both semantic and structural information into the filter, we precompute high-order adjacency and fine-tune the LLM with a triple classification task to enhance filtering performance. Experiments on two widely used knowledge graph datasets demonstrate that our attack outperforms the strongest black-box baselines and provides explanations via reasoning, and showing competitive performance compared with white-box methods. Comprehensive ablation and case studies further validate its capability to generate explanations.

知识图谱大模型对抗攻击可解释性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。