arrow
Return

SOPA: Sensitivity-Oriented Poisoning Attack for Self-Supervised Graph Embedding Model via Bilevel Evolutionary Optimization

delete2025-07-04
delete0
PRE
AI
S
Shen You
K
Kai Zhou
Z
Zhongshen Li
K
Kay Chen Tan
林
林秋镇 (Qiuzhen Lin)
李向涛 cover
李向涛 (Xiangtao Li)
K
Ka‐Chun Wong
DOI:10.1109/TEVC.2025.3586128delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Despite the popularity of graph neural networks (GNNs), perturbed graph data is still a serious threat toward its inherent vulnerabilities. Adversarial examples can easily manipulate the output of GNNs across various attack scenarios. Meanwhile, studying attacks on graph networks is crucial, as it can help model designers enhance the robustness of their models. In this study, we propose a sensitivity-oriented poisoning attack for self-supervised graph embedding model through bilevel optimization, which employs different optimization methods at each level. To further enhance attack effectiveness, we analyze graph structure to identify sensitive nodes and edges that guide attack directions, combining gradient-based and query-based methods to target both edge connections and node attributes. Besides, according to the defects of existing graph masked autoencoders models, we design the feature sensitivity and feature variance to reduce the feature differentiability, which impairs the performance of the downstream model. Ablation studies validate the effectiveness of our operator on three citation datasets. And benchmark-based experiments support the effectiveness of our method on three different graph tasks. Specifically, our approach achieve an average reduction of 3% in the accuracy of node classification compared to existing methods for attacking graph structures alone. When attacking both graph structures and attributes, our model has even achieved an average reduction of 4.5% for the node classification task, outperforming the existing methods.
Keywords:
Bilevel optimization
genetic algorithm (GA)
graph embedding model (GEM)
poisoning attack

Journal

IEEE Transactions on Evolutionary Computation cover
IEEE Transactions on Evolutionary Computation
IF:
12
Papers:
1.9K
Citations:
2.4W

Organization

T
the hong kong polytechnic university
Scholars:
5.3K
Papers: 2.9K
Citations: 0
S
shenzhen university
Scholars:
4.6W
Papers: 3.4W
Citations: 72
J
Jilin University
Scholars:
8.7W
Papers: 5.6W
Citations: 8.9K
C
city university of hong kong
Scholars:
5.8K
Papers: 3.3K
Citations: 2
researcher View more organizations
Cited Papers

Cited Papers

No cited papers available