arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2510.22643cs.LGcs.AI

增强图分类鲁棒性的奇异池化

Enhancing Graph Classification Robustness with Singular Pooling

King AI Labs, Microsoft Gaming(King AI实验室,微软游戏);LIX, École Polytechnique, IP Paris(LIX,巴黎高等理工学院,IP巴黎)

Sofiane Ennadir, Oleg Smirnov, Yassine Abbahaddou, Lele Cao, Johannes F. Lutzeyer

AI总结:

本研究提出鲁棒奇异池化(RS-Pool),利用节点嵌入矩阵的主奇异向量构建图级表示,以增强图分类的对抗鲁棒性,理论分析并实验验证其优于标准池化方法。

摘要:

图神经网络(GNNs)在一系列图表示学习任务中取得了强劲性能,然而与节点分类相比,它们在图分类中的对抗鲁棒性仍未得到充分探索。虽然大多数现有防御方法聚焦于消息传递组件,但本工作研究了池化操作在塑造鲁棒性中被忽视的作用。我们对标准平坦池化方法(求和、平均和最大)进行了理论分析,推导了它们对抗风险的上界,并识别了它们在不同攻击场景和图结构下的脆弱性。受这些见解的启发,我们提出了鲁棒奇异池化(RS-Pool),一种新颖的池化策略,利用节点嵌入矩阵的主奇异向量来构建鲁棒的图级表示。我们从理论上研究了RS-Pool的鲁棒性,并解释了所得界,从而增进了对我们所提出的池化算子的理解。虽然我们的分析以图卷积网络(GCNs)为中心,但RS-Pool是模型无关的,并且可以通过幂迭代高效实现。在真实世界基准上的实验结果表明,在遭受最先进的对抗攻击时,RS-Pool比所考虑的池化方法提供了更好的鲁棒性,同时保持了有竞争力的干净准确率。我们的代码公开于:https://github.com/king/rs-pool。

英文摘要:

Graph Neural Networks (GNNs) have achieved strong performance across a range of graph representation learning tasks, yet their adversarial robustness in graph classification remains underexplored compared to node classification. While most existing defenses focus on the message-passing component, this work investigates the overlooked role of pooling operations in shaping robustness. We present a theoretical analysis of standard flat pooling methods (sum, average and max), deriving upper bounds on their adversarial risk and identifying their vulnerabilities under different attack scenarios and graph structures. Motivated by these insights, we propose \textit{Robust Singular Pooling (RS-Pool)}, a novel pooling strategy that leverages the dominant singular vector of the node embedding matrix to construct a robust graph-level representation. We theoretically investigate the robustness of RS-Pool and interpret the resulting bound leading to improved understanding of our proposed pooling operator. While our analysis centers on Graph Convolutional Networks (GCNs), RS-Pool is model-agnostic and can be implemented efficiently via power iteration. Empirical results on real-world benchmarks show that RS-Pool provides better robustness than the considered pooling methods when subject to state-of-the-art adversarial attacks while maintaining competitive clean accuracy. Our code is publicly available at:\href{https://github.com/king/rs-pool}{https://github.com/king/rs-pool}.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑