{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/adversarial-attack-on-graph-neural-networks","title":"Adversarial Attack on Graph Neural Networks as An Influence Maximization Problem","arxiv_id":"2106.10785","date":"2021-06-21","proceeding":null,"authors":["Jiaqi Ma","Junwei Deng","Qiaozhu Mei"],"abstract":"Graph neural networks (GNNs) have attracted increasing interests. With broad deployments of GNNs in real-world applications, there is an urgent need for understanding the robustness of GNNs under adversarial attacks, especially in realistic setups. In this work, we study the problem of attacking GNNs in a restricted and realistic setup, by perturbing the features of a small set of nodes, with no access to model parameters and model predictions. Our formal analysis draws a connection between this type of attacks and an influence maximization problem on the graph. This connection not only enhances our understanding on the problem of adversarial attack on GNNs, but also allows us to propose a group of effective and practical attack strategies. Our experiments verify that the proposed attack strategies significantly degrade the performance of three popular GNN models and outperform baseline adversarial attack strategies.","url_abs":"https://arxiv.org/abs/2106.10785v1","url_pdf":"https://arxiv.org/pdf/2106.10785v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"adversarial-attack-on-graph-neural-networks","repo_url":"https://github.com/TheaperDeng/GNN-Attack-InfMax","is_official":1,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}},{"paper_slug":"adversarial-attack-on-graph-neural-networks","repo_url":"https://github.com/Mark12Ding/GNN-Practical-Attack","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[{"task_slug":"adversarial-attack","task_name":"Adversarial Attack"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2106.10785","atlas_url":"https://app.syntology.ai/?focus=2106.10785","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2106.10785"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/TheaperDeng/GNN-Attack-InfMax","reach":{"status":"ok","spdx":"MIT"}},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/Mark12Ding/GNN-Practical-Attack","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"unverified":6},"by_repo_kind":{"official":{"samples":2,"ran":0,"repositories":1},"listed":{"samples":4,"ran":0,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"17c8bfb79ab714aa","entry":"New_sort_erf_testsum","repo":"TheaperDeng/GNN-Attack-InfMax","repo_kind":"official","path":"attack.py","file_url":"https://github.com/TheaperDeng/GNN-Attack-InfMax/blob/HEAD/attack.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"17c8bfb79ab714aa"}},{"code_sha256_prefix":"6dbb03ed7218399b","entry":"New_sort_sumtest","repo":"TheaperDeng/GNN-Attack-InfMax","repo_kind":"official","path":"attack.py","file_url":"https://github.com/TheaperDeng/GNN-Attack-InfMax/blob/HEAD/attack.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"6dbb03ed7218399b"}},{"code_sha256_prefix":"93d1979b7ccbcd8e","entry":"getScore","repo":"Mark12Ding/GNN-Practical-Attack","repo_kind":"listed","path":"attack.py","file_url":"https://github.com/Mark12Ding/GNN-Practical-Attack/blob/HEAD/attack.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"93d1979b7ccbcd8e"}},{"code_sha256_prefix":"193746d4ee64623c","entry":"getScoreGreedy","repo":"Mark12Ding/GNN-Practical-Attack","repo_kind":"listed","path":"attack.py","file_url":"https://github.com/Mark12Ding/GNN-Practical-Attack/blob/HEAD/attack.py","link_basis":"plan_row","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"193746d4ee64623c"}},{"code_sha256_prefix":"80fd6620f61eed02","entry":"getThrehold","repo":"Mark12Ding/GNN-Practical-Attack","repo_kind":"listed","path":"attack.py","file_url":"https://github.com/Mark12Ding/GNN-Practical-Attack/blob/HEAD/attack.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"80fd6620f61eed02"}},{"code_sha256_prefix":"e428c621584fb5ba","entry":"split_data","repo":"Mark12Ding/GNN-Practical-Attack","repo_kind":"listed","path":"utils.py","file_url":"https://github.com/Mark12Ding/GNN-Practical-Attack/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"e428c621584fb5ba"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}