Node Classification Backdoor Defense on Physics (GU)
0ASR (%)RIGBD-Perfect
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| RIGBD-PerfectAttack=SBA2025.02 | 0 | 95.88 | 87.35 | |
| RIGBDAttack=GTA2025.02 | 0 | 95.73 | 64.71 | |
| RIGBD-PerfectAttack=GTA2025.02 | 0 | 95.85 | 15.71 | |
| ODAttack=UGBA2025.02 | 0 | 80.47 | 51.08 | |
| RIGBD-PerfectAttack=UGBA2025.02 | 0 | 46.36 | 51.02 | |
| RIGBD-PerfectAttack=DPGBA2025.02 | 0 | 90.05 | 10.35 | |
| SimGuardAttack=GTA2025.02 | 0.63 | 95.45 | 99.5 | |
| SimGuardAttack=UGBA2025.02 | 0.63 | 96.26 | 100 | |
| GNNGuardAttack=SBA2025.02 | 0.67 | 96.46 | 99.04 | |
| SimGuardAttack=SBA2025.02 | 0.7 | 96.4 | 99.73 | |
| PruneAttack=SBA2025.02 | 0.77 | 96.08 | 91.25 | |
| PruneAttack=GTA2025.02 | 0.77 | 95.96 | 98.26 | |
| RIGBDAttack=DPGBA2025.02 | 0.81 | 94.69 | 42.07 | |
| RIGBDAttack=SBA2025.02 | 1.33 | 94.57 | 96.05 | |
| ODAttack=SBA2025.02 | 2.2 | 96.14 | 97.15 | |
| SimGuardAttack=DPGBA2025.02 | 3.79 | 96.35 | 99.68 | |
| PruneAttack=DPGBA2025.02 | 4.14 | 95.88 | 98.05 | |
| RobustGCNAttack=SBA2025.02 | 6.49 | 96.52 | 94.34 | |
| GCNAttack=SBA2025.02 | 19.19 | 96.08 | — | |
| RobustGCNAttack=GTA2025.02 | 21.13 | 96.54 | 82.02 | |
| GNNGuardAttack=GTA2025.02 | 55.84 | 96.23 | 53.58 | |
| ODAttack=DPGBA2025.02 | 90.95 | 93.91 | 55.52 | |
| GNNGuardAttack=DPGBA2025.02 | 94.04 | 96.37 | 53 | |
| GCNAttack=DPGBA2025.02 | 95.47 | 94.49 | — | |
| PruneAttack=UGBA2025.02 | 95.85 | 47.46 | 20.81 | |
| RobustGCNAttack=DPGBA2025.02 | 96.03 | 96.63 | 52.85 | |
| GCNAttack=GTA2025.02 | 96.05 | 94.96 | — | |
| ODAttack=GTA2025.02 | 96.52 | 95.76 | 20.49 | |
| GCNAttack=UGBA2025.02 | 100 | — | — | |
| GNNGuardAttack=UGBA2025.02 | 100 | 47.89 | 17.25 | |
| RobustGCNAttack=UGBA2025.02 | 100 | 14.98 | 17.54 | |
| RIGBDAttack=UGBA2025.02 | 100 | 46.18 | 17.54 |