arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2506.07428cs.AIcs.LG
收藏

HeTa:基于关系的异质图基础攻击模型

HeTa: Relation-wise Heterogeneous Graph Foundation Attack Model

School of Cyberspace, Hangzhou Dianzi University(电子科技大学信息学院);Data Security Governance Zhejiang Engineering Research Center, Hangzhou Dianzi University(浙江省数据安全治理工程研究中心);Beihang University(北航)

Yuling Wang, Zihui Chen, Pengfei Jiao, Xiao Wang

AI总结:

针对异质图神经网络攻击难以跨模型与跨图泛化的问题,提出 HeTa 基础攻击模型,利用共享关系感知攻击单元和逐关系序列化攻击实现可迁移、易适配的强攻击。

摘要:

异质图神经网络(HGNN)是脆弱的,这凸显出需要定制化攻击来评估其鲁棒性并确保安全性。然而,现有的 HGNN 攻击往往需要对参数进行复杂的重新训练,才能为新场景生成特定扰动。最近,基础模型通过捕捉跨多种图分布的共享语义,为图神经网络的泛化开辟了新视野。这促使我们发问:能否为 HGNN 设计一种基础攻击模型,使其能够在不同 HGNN 之间生成可泛化的扰动,并快速适应新的异质图(HG)?实证发现表明,尽管模型设计和参数空间存在显著差异,但从关系感知的角度看,不同 HGNN 竟共享共同的脆弱性模式。因此,我们探索如何通过挖掘共享攻击单元来设计基础 HGNN 攻击准则。本文提出一种新颖的基于关系的异质图基础攻击模型 HeTa。我们引入一个基础代理模型,以对齐异质性并识别共享的关系感知攻击单元的重要性。在此基础上,我们根据识别出的关系权重实施逐关系的序列化攻击。通过这种方式,扰动可以迁移到各种目标 HGNN,并能轻松针对新 HG 进行微调。大量实验展示了本方法强大的攻击性能和泛化能力。

英文摘要:

Heterogeneous Graph Neural Networks (HGNNs) are vulnerable, highlighting the need for tailored attacks to assess their robustness and ensure security. However, existing HGNN attacks often require complex retraining of parameters to generate specific perturbations for new scenarios. Recently, foundation models have opened new horizons for the generalization of graph neural networks by capturing shared semantics across various graph distributions. This leads us to ask:Can we design a foundation attack model for HGNNs that enables generalizable perturbations across different HGNNs, and quickly adapts to new heterogeneous graphs (HGs)? Empirical findings reveal that, despite significant differences in model design and parameter space, different HGNNs surprisingly share common vulnerability patterns from a relation-aware perspective. Therefore, we explore how to design foundation HGNN attack criteria by mining shared attack units. In this paper, we propose a novel relation-wise heterogeneous graph foundation attack model, HeTa. We introduce a foundation surrogate model to align heterogeneity and identify the importance of shared relation-aware attack units. Building on this, we implement a serialized relation-by-relation attack based on the identified relational weights. In this way, the perturbation can be transferred to various target HGNNs and easily fine-tuned for new HGs. Extensive experiments exhibit powerful attack performances and generalizability of our method.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑