arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2404.15744cs.LGcs.AIcs.CR

针对基于图的假新闻检测器的一种通用黑盒对抗攻击

A General Black-box Adversarial Attack on Graph-based Fake News Detectors

Northwestern Polytechnical University(西北工业大学);Air Force Engineering University(空军工程大学);Guangzhou University(广州大学)

Peican Zhu, Zechen Pan, Yang Liu, Jiwei Tian, Keke Tang, Zhen Wang

AI总结:

针对黑盒场景下基于GNN的假新闻检测器难以实施经典对抗攻击的问题,提出首个通用黑盒对抗攻击框架GAFSI,通过模拟用户共享行为注入虚假社交交互,实现对不同图结构检测器的有效攻击。

摘要:

基于图神经网络(GNN)的假新闻检测器应用各种方法构建图,旨在学习具有区分性的新闻嵌入以进行分类。由于在黑盒场景中攻击者不知道构建细节,因此执行需要特定邻接矩阵的经典对抗攻击是不现实的。在本文中,我们提出了首个通用黑盒对抗攻击框架,即基于虚假社交交互的通用攻击(GAFSI),以针对基于不同图结构的检测器。具体而言,由于共享是基于GNN的假新闻检测器构建图的重要社交交互,我们模拟共享行为来欺骗检测器。首先,我们提出了一个欺诈者选择模块,利用局部和全局信息选择参与用户。此外,帖子注入模块引导选定的用户通过发送帖子创建共享关系。共享记录将被添加到社交上下文中,从而实现对不同检测器的通用攻击。在经验数据集上的实验结果证明了GAFSI的有效性。

英文摘要:

Graph Neural Network (GNN)-based fake news detectors apply various methods to construct graphs, aiming to learn distinctive news embeddings for classification. Since the construction details are unknown for attackers in a black-box scenario, it is unrealistic to conduct the classical adversarial attacks that require a specific adjacency matrix. In this paper, we propose the first general black-box adversarial attack framework, i.e., General Attack via Fake Social Interaction (GAFSI), against detectors based on different graph structures. Specifically, as sharing is an important social interaction for GNN-based fake news detectors to construct the graph, we simulate sharing behaviors to fool the detectors. Firstly, we propose a fraudster selection module to select engaged users leveraging local and global information. In addition, a post injection module guides the selected users to create shared relations by sending posts. The sharing records will be added to the social context, leading to a general attack against different detectors. Experimental results on empirical datasets demonstrate the effectiveness of GAFSI.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑