arrow
Return

Coupled-Space Attacks Against Random-Walk-Based Anomaly Detection

delete2024-01-01
delete0
PRE
AI
Y
Yuni Lai
M
Marcin Waniek
L
Liying Li
朱钰琳 cover
朱钰琳 (Yulin Zhu)
T
Tomasz Michalak
T
Talal Rahwan
K
Kai Zhou *
DOI:10.1109/TIFS.2024.3468156delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Random Walks-based Anomaly Detection (RWAD) is commonly used to identify anomalous patterns in various applications. An intriguing characteristic of RWAD is that the input graph can either be pre-existing graphs or feature-derived graphs constructed from raw features. Consequently, there are two potential attack surfaces against RWAD: graph-space attacks and feature-space attacks. In this paper, we explore this vulnerability by designing practical coupled-space (interdependent feature-space and graph-space) attacks, investigating the interplay between graph-space and feature-space attacks. To this end, we conduct a thorough complexity analysis, proving that attacking RWAD is NP-hard. Then, we proceed to formulate the graph-space attack as a bi-level optimization problem and propose two strategies to solve it: alternative iteration (alterI-attack) or utilizing the closed-form solution of the random walk model (cf-attack). Finally, we utilize the results from the graph-space attacks as guidance to design more powerful feature-space attacks (i.e., graph-guided attacks). Comprehensive experiments demonstrate that our proposed attacks are effective in enabling the target nodes to evade the detection from RWAD with a limited attack budget. In addition, we conduct transfer attack experiments in a black-box setting, which show that our feature attack significantly decreases the anomaly scores of target nodes. Our study opens the door to studying the coupled-space attack against graph anomaly detection in which the graph space relies on the feature space.
Keywords:
Anomaly detection
Feature extraction
Optimization
Robustness
Security
Vectors
Pipelines
Graph-based anomaly detection
random walk
poisoning attack
adversarial attacks
security and privacy

Journal

IEEE Transactions on Information Forensics and Security cover
IEEE Transactions on Information Forensics and Security
IF:
8
Papers:
5.2K
Citations:
2.3W

Organization

H
hong kong polytechnic university
Scholars:
3.0W
Papers: 4.1W
Citations: 921
U
University of Warsaw
Scholars:
1.2W
Papers: 1.1W
Citations: 1.1W
N
New York University
Scholars:
4.4W
Papers: 3.9W
Citations: 5.8W
researcher View more organizations