{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/bounding-the-expected-robustness-of-graph","title":"Bounding the Expected Robustness of Graph Neural Networks Subject to Node Feature Attacks","arxiv_id":"2404.17947","date":"2024-04-27","proceeding":null,"authors":["Yassine Abbahaddou","Sofiane Ennadir","Johannes F. Lutzeyer","Michalis Vazirgiannis","Henrik Boström"],"abstract":"Graph Neural Networks (GNNs) have demonstrated state-of-the-art performance in various graph representation learning tasks. Recently, studies revealed their vulnerability to adversarial attacks. In this work, we theoretically define the concept of expected robustness in the context of attributed graphs and relate it to the classical definition of adversarial robustness in the graph representation learning literature. Our definition allows us to derive an upper bound of the expected robustness of Graph Convolutional Networks (GCNs) and Graph Isomorphism Networks subject to node feature attacks. Building on these findings, we connect the expected robustness of GNNs to the orthonormality of their weight matrices and consequently propose an attack-independent, more robust variant of the GCN, called the Graph Convolutional Orthonormal Robust Networks (GCORNs). We further introduce a probabilistic method to estimate the expected robustness, which allows us to evaluate the effectiveness of GCORN on several real-world datasets. Experimental experiments showed that GCORN outperforms available defense methods. Our code is publicly available at: \\href{https://github.com/Sennadir/GCORN}{https://github.com/Sennadir/GCORN}.","url_abs":"https://arxiv.org/abs/2404.17947v1","url_pdf":"https://arxiv.org/pdf/2404.17947v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"bounding-the-expected-robustness-of-graph","repo_url":"https://github.com/sennadir/gcorn","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":0,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"adversarial-robustness","task_name":"Adversarial Robustness"},{"task_slug":"graph-representation-learning","task_name":"Graph Representation Learning"},{"task_slug":"representation-learning","task_name":"Representation Learning"}],"methods":[{"method_slug":"gcn","method_name":"GCN"}],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":null,"atlas_url":"https://app.syntology.ai/?focus=2404.17947","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2404.17947"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"deterministic:regex_extraction","url":"https://github.com/Sennadir/GCORN","reach":null},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/sennadir/gcorn","reach":null}],"summary":{"ran":1,"unverified":2},"by_repo_kind":{"official":{"samples":3,"ran":1,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"a933735600149fa6","entry":"MLPClassifier","repo":"sennadir/gcorn","repo_kind":"official","path":"GCORN.py","file_url":"https://github.com/sennadir/gcorn/blob/HEAD/GCORN.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"invariant","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"a933735600149fa6"}},{"code_sha256_prefix":"eb743464b3b6d2c9","entry":"ConvClass","repo":"sennadir/gcorn","repo_kind":"official","path":"GCORN.py","file_url":"https://github.com/sennadir/gcorn/blob/HEAD/GCORN.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"eb743464b3b6d2c9"}},{"code_sha256_prefix":"84d383590d049ace","entry":"GCORN","repo":"sennadir/gcorn","repo_kind":"official","path":"GCORN.py","file_url":"https://github.com/sennadir/gcorn/blob/HEAD/GCORN.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"84d383590d049ace"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}