通过对抗性图提示提升图模型微调的鲁棒性
Robust Graph Fine-Tuning with Adversarial Graph Prompting
- 将对抗学习引入图提示,构建极小极大优化框架
- 在多个基准上显著提升模型对拓扑与节点噪声的抗性
- 适用于各类预训练图神经网络,适合安全敏感场景
参数高效微调(PEFT)已成为适应预训练图神经网络(GNN)下游任务的主流方法。然而,现有PEFT方法对图结构和节点属性的噪声与攻击普遍存在显著脆弱性。为此,我们首次将对抗学习融入图提示,提出一种新型对抗性图提示(AGP)框架,实现鲁棒的图微调。AGP包含两个关键方面:首先,将AGP建模为极小极大优化问题,采用交替优化方案求解;内层最大化使用联合投影梯度下降(JointPGD)生成强对抗噪声,外层最小化则通过一个简单但有效的模块学习最优节点提示以抵消对抗噪声。其次,理论上证明了该方法可同时应对图结构和节点噪声,验证了其在多种图噪声下的通用性与鲁棒性。所提AGP是通用方法,可与多种预训练GNN结合,提升下游任务鲁棒性。大量实验在多个基准任务上验证了其相比前沿方法的优越性。
原文摘要 · Abstract (English)
Parameter-Efficient Fine-Tuning (PEFT) method has emerged as a dominant paradigm for adapting pre-trained GNN models to downstream tasks. However, existing PEFT methods usually exhibit significant vulnerability to various noise and attacks on graph topology and node attributes/features. To address this issue, for the first time, we propose integrating adversarial learning into graph prompting and develop a novel Adversarial Graph Prompting (AGP) framework to achieve robust graph fine-tuning. Our AGP has two key aspects. First, we propose the general problem formulation of AGP as a min-max optimization problem and develop an alternating optimization scheme to solve it. For inner maximization, we propose Joint Projected Gradient Descent (JointPGD) algorithm to generate strong adversarial noise. For outer minimization, we employ a simple yet effective module to learn the optimal node prompts to counteract the adversarial noise. Second, we demonstrate that the proposed AGP can theoretically address both graph topology and node noise. This confirms the versatility and robustness of our AGP fine-tuning method across various graph noise. Note that, the proposed AGP is a general method that can be integrated with various pre-trained GNN models to enhance their robustness on the downstream tasks. Extensive experiments on multiple benchmark tasks validate the robustness and effectiveness of AGP method compared to state-of-the-art methods.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。