arXiv:2510.22643cs.LGcs.AI2025-10NeurIPS

提出新型图池化方法,提升图分类模型对抗攻击的鲁棒性。

Enhancing Graph Classification Robustness with Singular Pooling

  • 基于节点嵌入矩阵的主奇异向量设计鲁棒池化策略
  • 在多种攻击下比传统池化方法显著降低对抗风险
  • 适用于各类GNN模型,适合关注模型安全的研究者

图神经网络在图表示学习任务中表现优异,但在图分类中的对抗鲁棒性研究仍不足。现有防御多聚焦于消息传递机制,本文首次系统分析标准平铺池化(求和、平均、最大值)的脆弱性,推导其对抗风险上界并揭示不同攻击场景与图结构下的弱点。受此启发,提出鲁棒奇异池化(RS-Pool),利用节点嵌入矩阵的主奇异向量构建图级表示。理论分析表明其具有更强的鲁棒性,且可高效通过幂迭代实现。在真实数据集上的实验显示,面对先进对抗攻击,RS-Pool在保持良好干净准确率的同时,显著优于对比池化方法。

原文摘要 · Abstract (English)

Graph Neural Networks (GNNs) have achieved strong performance across a range of graph representation learning tasks, yet their adversarial robustness in graph classification remains underexplored compared to node classification. While most existing defenses focus on the message-passing component, this work investigates the overlooked role of pooling operations in shaping robustness. We present a theoretical analysis of standard flat pooling methods (sum, average and max), deriving upper bounds on their adversarial risk and identifying their vulnerabilities under different attack scenarios and graph structures. Motivated by these insights, we propose \textit{Robust Singular Pooling (RS-Pool)}, a novel pooling strategy that leverages the dominant singular vector of the node embedding matrix to construct a robust graph-level representation. We theoretically investigate the robustness of RS-Pool and interpret the resulting bound leading to improved understanding of our proposed pooling operator. While our analysis centers on Graph Convolutional Networks (GCNs), RS-Pool is model-agnostic and can be implemented efficiently via power iteration. Empirical results on real-world benchmarks show that RS-Pool provides better robustness than the considered pooling methods when subject to state-of-the-art adversarial attacks while maintaining competitive clean accuracy. Our code is publicly available at:\href{https://github.com/king/rs-pool}{https://github.com/king/rs-pool}.

图神经网络对抗鲁棒性图池化安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。