AIセキュリティポータル K Program
Rethinking the Trigger-injecting Position in Graph Backdoor Attack
Share
Abstract
Backdoor attacks have been demonstrated as a security threat for machine learning models. Traditional backdoor attacks intend to inject backdoor functionality into the model such that the backdoored model will perform abnormally on inputs with predefined backdoor triggers and still retain state-of-the-art performance on the clean inputs. While there are already some works on backdoor attacks on Graph Neural Networks (GNNs), the backdoor trigger in the graph domain is mostly injected into random positions of the sample. There is no work analyzing and explaining the backdoor attack performance when injecting triggers into the most important or least important area in the sample, which we refer to as trigger-injecting strategies MIAS and LIAS, respectively. Our results show that, generally, LIAS performs better, and the differences between the LIAS and MIAS performance can be significant. Furthermore, we explain these two strategies' similar (better) attack performance through explanation techniques, which results in a further understanding of backdoor attacks in GNNs.
Explainability techniques for graph convolutional networks
F. Baldassarre, H. Azizpour
Published: 2019
BadNets: Evaluating backdooring attacks on deep neural networks
Tianyu Gu, Kang Liu, Brendan Dolan-Gavitt, Siddharth Garg
Published: 2019
Graph representation learning
William L Hamilton
Published: 2020
Visualizing large graphs
Yifan Hu, Lei Shi
Published: 2015
Auc-oriented graph neural network for fraud detection
Mengda Huang, Yang Liu, Xiang Ao, Kuan Li, Jianfeng Chi, Jinghua Feng, Hao Yang, Qing He
Published: 2022
Gnnlens: A visual analytics approach for prediction error diagnosis of graph neural networks
Zhihua Jin, Yong Wang, Qianwen Wang, Yao Ming, Tengfei Ma, Huamin Qu
Published: 2022
Semi-supervised classification with graph convolutional networks
Thomas N Kipf, Max Welling
Published: 2017
Adversarial xai methods in cybersecurity
Aditya Kuppa, Nhien-An Le-Khac
Published: 2021
Pick and choose: a gnn-based imbalanced learning approach for fraud detection
Yang Liu, Xiang Ao, Zidi Qin, Jianfeng Chi, Jinghua Feng, Hao Yang, Qing He
Published: 2021
Parameterized explainer for graph neural network
D. Luo, W. Cheng, D. Xu, W. Yu, B. Zong, H. Chen, X. Zhang
Published: 2020
Sok: Explainable machine learning for computer security applications
A. Nadeem, et al.
Published: 2023
Explainability methods for graph convolutional neural networks
P. E. Pope, S. Kolouri, M. Rostami, C. E. Martin, H. Hoffmann
Published: 2019
Higher-order explanations of graph neural networks via relevant walks
Thomas Schnake, Oliver Eberle, Jonas Lederer, Shinichi Nakajima, Kristof T Schutt, Klaus-Robert Müller, Grégoire Montavon
Published: 2021
Grad-cam: Visual explanations from deep networks via gradient-based localization
R. R. Selvaraju, M. Cogswell, A. Das, R. Vedantam, D. Parikh, D. Batra
Published: 2017
Collective classification in network data
Prithviraj Sen, Galileo Namata, Mustafa Bilgic, Lise Getoor, Brian Galligher, Tina Eliassi-Rad
Published: 2008
{Explanation-Guided} backdoor poisoning attacks against malware classifiers
Giorgio Severi, Jim Meyer, Scott Coull, Alina Oprea
Published: 2021
Clean-label backdoor attacks
Alexander Turner, Dimitris Tsipras, Aleksander Madry
Published: 2018
Graph Attention Networks
Petar Velickovic, Guillem Cucurull, Arantxa Casanova, Adriana Romero, Pietro Lio, Yoshua Bengio
Published: 2018
Pgm-explainer: Probabilistic graphical model explanations for graph neural networks
M. Vu, M. T. Thai
Published: 2020
Be confident! towards trustworthy graph neural networks via confidence calibration
Xiao Wang, Hongrui Liu, Chuan Shi, Cheng Yang
Published: 2021
Graph backdoor
Zhaohan Xi, Ren Pang, Shouling Ji, Ting Wang
Published: 2021
Dba: Distributed backdoor attacks against federated learning
Chulin Xie, Keli Huang, Pin-Yu Chen, Bo Li
Published: 2020
Explainability-based backdoor attacks against graph neural networks
Jing Xu, Minhui Xue, Stjepan Picek
Published: 2021
Gnnexplainer: Generating explanations for graph neural networks
Z. Ying, D. Bourgeois, J. You, M. Zitnik, J. Leskovec
Published: 2019
Xgnn: Towards model-level explanations of graph neural networks
Hao Yuan, Jiliang Tang, Xia Hu, Shuiwang Ji
Published: 2020
On explainability of graph neural networks via subgraph explorations
Hao Yuan, Haiyang Yu, Jie Wang, Kang Li, Shuiwang Ji
Published: 2021
Backdoor attacks to graph neural networks
Zaixi Zhang, Jinyuan Jia, Binghui Wang, Neil Zhenqiang Gong
Published: 2021
Deep learning on graphs: A survey
Ziwei Zhang, Peng Cui, Wenwu Zhu
Published: 2020
Graph neural networks: A review of methods and applications
Jie Zhou, Ganqu Cui, Shengding Hu, Zhengyan Zhang, Cheng Yang, Zhiyuan Liu, Lifeng Wang, Changcheng Li, Maosong Sun
Published: 2020
Share