Timezone: »

 
Poster
Adversarial Attack on Graph Structured Data
Hanjun Dai · Hui Li · Tian Tian · Xin Huang · Lin Wang · Jun Zhu · Le Song

Thu Jul 12 09:15 AM -- 12:00 PM (PDT) @ Hall B #53
in Posters Thu »

Deep learning on graph structures has shown exciting results in various applications. However, few attentions have been paid to the robustness of such models, in contrast to numerous research work for image or text adversarial attack and defense. In this paper, we focus on the adversarial attacks that fool deep learning models by modifying the combinatorial structure of data. We first propose a reinforcement learning based attack method that learns the generalizable attack policy, while only requiring prediction labels from the target classifier. We further propose attack methods based on genetic algorithms and gradient descent in the scenario where additional prediction confidence or gradients are available. We use both synthetic and real-world data to show that, a family of Graph Neural Network models are vulnerable to these attacks, in both graph-level and node-level classification tasks. We also show such attacks can be used to diagnose the learned classifiers.

[ PDF] 

Author Information

Hanjun Dai (Georgia Tech)
Hui Li (Ant Financial Services Group)
Tian Tian (Tsinghua University)
Xin Huang (Ant Financial)
Lin Wang
Jun Zhu (Tsinghua University)
Le Song (Georgia Institute of Technology)

Related Events (a corresponding poster, oral, or spotlight)

More from the Same Authors