arXiv:2606.01560cs.LGcs.AI2026-06

提出GJDNet,通过解耦表示与决策空间提升图神经网络抗攻击能力。

GJDNet: Robust Graph Neural Networks via Joint Disentangled Learning Against Adversarial Attacks

论文配图:GJDNet: Robust Graph Neural Networks via Joint Disentangled Learning Against Adversarial Attacks
图 1 · 摘自论文原文
  • 解耦节点表示与决策空间,分离扰动影响。
  • 在不同连通性图上均实现强鲁棒性,优于现有方法。
  • 适合关注图神经网络安全性的研究者与应用开发者。

图神经网络易受对抗攻击,攻击会改变图的连通性模式:在同质图中引入异质边,在异质图中引入同质边,导致结构-特征不匹配,破坏邻域聚合。现有防御方法受限于固定同质性假设或依赖标准Softmax分类器,无法应对扰动引起的表征偏移。本文提出图联合解耦网络(GJDNet),从表示与决策双层面增强鲁棒性:采用基于特征的软结构解耦与偏度感知邻居过滤,抑制结构-特征错配;引入球形决策边界(SDB),促进类内紧凑性与类间分离性,稳定扰动下的决策边界。理论分析揭示了解耦机制有效性,大量实验表明GJDNet在不同连通性图上均保持一致强鲁棒性。

原文摘要 · Abstract (English)

Graph Neural Networks (GNNs) are vulnerable to adversarial attacks, which inherently invert connectivity patterns by introducing disassortative edges in assortative graphs and assortative edges in disassortative graphs. This structural inversion creates structure-feature mismatches that disrupt neighborhood aggregation across different graph types. However, we find that existing defenses are limited, as they either treat neighborhoods as monolithic under fixed assortativity assumptions or rely on standard softmax classifiers that fail to account for perturbation-induced representation shifts. To further exploit this observation, we adopt a robustness perspective that jointly disentangles node representations and decision spaces, isolating perturbation effects while enforcing well-separated decision regions. Based on this principle, we propose Graph Joint Disentanglement Network (GJDNet), a unified framework for robust node classification across diverse graph assortativity regimes. GJDNet enhances robustness at both representation and decision levels: it employs feature-driven soft structural disentanglement with skewness-aware neighbor filtering to suppress perturbation-induced structure-feature mismatches, and introduces a Spherical Decision Boundary (SDB) to promote intra-class compactness and inter-class separation in the embedding space, thereby stabilizing decision boundaries under perturbations. Theoretical analysis provides insights into the effectiveness of the proposed disentangled representation and decision mechanisms, while extensive experiments demonstrate that GJDNet consistently achieves strong robustness across graphs with different connectivity regimes.

图神经网络对抗攻击解耦学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。