Node Classification Backdoor Defense on Cora (GU)
0ASR (%)RIGBD-Perfect
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| RIGBD-PerfectAttack=SBA2025.02 | 0 | 84.44 | 53.13 | |
| RIGBD-PerfectAttack=GTA2025.02 | 0 | 76.29 | 15.86 | |
| RIGBD-PerfectAttack=UGBA2025.02 | 0 | 81.48 | 15.86 | |
| RIGBDAttack=DPGBA2025.02 | 0 | 1.85 | 1.84 | |
| SimGuardAttack=DPGBA2025.02 | 0.87 | 84.44 | 100 | |
| RIGBD-PerfectAttack=DPGBA2025.02 | 1.73 | 80.37 | 24.72 | |
| RIGBDAttack=UGBA2025.02 | 3.11 | 78.14 | 32.1 | |
| GNNGuardAttack=DPGBA2025.02 | 5.21 | 79.25 | 89.66 | |
| RIGBDAttack=SBA2025.02 | 5.33 | 84.07 | 76.75 | |
| PruneAttack=GTA2025.02 | 5.33 | 82.22 | 85.6 | |
| SimGuardAttack=SBA2025.02 | 5.78 | 84.44 | 100 | |
| SimGuardAttack=GTA2025.02 | 5.78 | 84.44 | 100 | |
| SimGuardAttack=UGBA2025.02 | 5.78 | 84.44 | 100 | |
| GNNGuardAttack=SBA2025.02 | 7.11 | 78.88 | 90.4 | |
| GNNGuardAttack=GTA2025.02 | 12 | 78.14 | 89.29 | |
| PruneAttack=SBA2025.02 | 19.11 | 82.22 | 74.53 | |
| PruneAttack=DPGBA2025.02 | 20 | 79.25 | 82.28 | |
| GCNAttack=SBA2025.02 | 52.03 | 84.07 | — | |
| ODAttack=SBA2025.02 | 55.55 | 84.07 | 53.87 | |
| RobustGCNAttack=SBA2025.02 | 68.88 | 83.7 | 40.95 | |
| RobustGCNAttack=UGBA2025.02 | 80.88 | 83.33 | 28.78 | |
| ODAttack=DPGBA2025.02 | 95.65 | 80.74 | 17.71 | |
| GCNAttack=DPGBA2025.02 | 96.31 | 80 | — | |
| RobustGCNAttack=DPGBA2025.02 | 98.22 | 82.59 | 16.97 | |
| RobustGCNAttack=GTA2025.02 | 99.55 | 82.59 | 15.49 | |
| RIGBDAttack=GTA2025.02 | 99.55 | 75.92 | 16.97 | |
| PruneAttack=UGBA2025.02 | 99.55 | 78.14 | 17.34 | |
| GCNAttack=GTA2025.02 | 100 | 75.19 | — | |
| ODAttack=GTA2025.02 | 100 | 72.22 | 16.97 | |
| GCNAttack=UGBA2025.02 | 100 | 82.59 | — | |
| GNNGuardAttack=UGBA2025.02 | 100 | 76.29 | 15.86 | |
| ODAttack=UGBA2025.02 | 100 | 81.11 | 16.97 |