arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2406.03052cs.LG
收藏

你的模型还公平吗?基于节点注入的图神经网络公平性攻击

Are Your Models Still Fair? Fairness Attacks on Graph Neural Networks via Node Injections

Huazhong University of Science and Technology(华中科技大学)

Zihan Luo, Hong Huang, Yongkang Zhou, Jiping Zhang, Nuo Chen, Hai Jin

AI总结:

针对现有GNN公平性攻击需修改已有节点连接、不贴合实际的问题,提出基于节点注入的NIFA攻击方法,结合两项设计原则与特征优化,仅注入1%节点即可显著破坏主流及公平感知GNN的公平性,为GNN公平性防御研究提供参考。

摘要:

尽管图神经网络(GNNs)在图相关任务中展现出卓越性能,但近期研究发现GNN在遭遇恶意对抗攻击时存在公平性漏洞。不过现有所有公平性攻击都需要修改已有节点间的连接关系,这在实际场景中可能无法实现。为此,我们提出了基于节点注入的公平性攻击(Node Injection-based Fairness Attack,NIFA),在这一更贴近现实的设定下探究GNN公平性的脆弱性。具体而言,NIFA首先为节点注入操作设计了两个关键原则,即不确定性最大化原则和同质性提升原则,随后通过优化注入节点的特征矩阵进一步保障公平性攻击的有效性。在三个真实世界数据集上开展的综合实验一致表明,仅注入1%的节点,NIFA就能显著破坏主流GNN(甚至包括具备公平感知的GNN)的公平性。我们真诚希望本工作能促使研究人员更多关注GNN公平性的脆弱性问题,并推动相应防御机制的研发。我们的代码和数据已发布于:https://github.com/CGCL-codes/NIFA。

英文摘要:

Despite the remarkable capabilities demonstrated by Graph Neural Networks (GNNs) in graph-related tasks, recent research has revealed the fairness vulnerabilities in GNNs when facing malicious adversarial attacks. However, all existing fairness attacks require manipulating the connectivity between existing nodes, which may be prohibited in reality. To this end, we introduce a Node Injection-based Fairness Attack (NIFA), exploring the vulnerabilities of GNN fairness in such a more realistic setting. In detail, NIFA first designs two insightful principles for node injection operations, namely the uncertainty-maximization principle and homophily-increase principle, and then optimizes injected nodes' feature matrix to further ensure the effectiveness of fairness attacks. Comprehensive experiments on three real-world datasets consistently demonstrate that NIFA can significantly undermine the fairness of mainstream GNNs, even including fairness-aware GNNs, by injecting merely 1% of nodes. We sincerely hope that our work can stimulate increasing attention from researchers on the vulnerability of GNN fairness, and encourage the development of corresponding defense mechanisms. Our code and data are released at: https://github.com/CGCL-codes/NIFA.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑