Node Classification on CHAMELEON vanilla (test)
0.13Miss-classification Rate (Δ=1)FGA
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| FGAVictim Model=GRAND, Attack Scenario=Evasion2026.05 | 0.13 | 1.2 | 1.73 | 2.53 | 2.93 | 6.1 | |
| FGAVictim Model=RUNG, Attack Scenario=Evasion2026.05 | 0.93 | 2.27 | 2.53 | 3.33 | 4.13 | 3.4 | |
| L1D-RNDVictim Model=RUNG, Attack Scenario=Evasion2026.05 | 2.27 | 2.27 | 3.47 | 4.53 | 5.07 | 2.7 | |
| L1D-RNDVictim Model=GRAND, Attack Scenario=Evasion2026.05 | 2.67 | 6 | 6.93 | 7.73 | 7.6 | 1.3 | |
| NETTACKVictim Model=GCN2026.05 | 3.07 | 5.47 | 4.93 | 6.27 | 6.27 | 7 | |
| NETTACKVictim Model=GIN2026.05 | 4 | 7.33 | 6.67 | 9.87 | 12 | 7 | |
| NETTACKVictim Model=GCN2026.05 | 7.87 | 8.13 | 7.33 | 7.73 | 8.4 | 7 | |
| NETTACKVictim Model=GSAGE2026.05 | 8.8 | 10.13 | 12.27 | 11.47 | 15.73 | 7 | |
| L1D-RNDVictim Model=RobustGCN, Attack Scenario=Evasion2026.05 | 11.07 | 31.47 | 41.6 | 47.6 | 46.67 | 4.4 | |
| NETTACKVictim Model=GSAGE2026.05 | 12.4 | 12.4 | 16.13 | 16.13 | 20 | 7 | |
| L1D-RNDVictim Model=GSAGE2026.05 | 13.47 | 34 | 43.07 | 44.93 | 49.47 | 2.2 | |
| L1D-RNDVictim Model=GCORN, Attack Scenario=Evasion2026.05 | 16.53 | 32.53 | 38.13 | 41.47 | 45.73 | 3.1 | |
| L1D-RNDVictim Model=GIN2026.05 | 18.13 | 56 | 55.6 | 64.13 | 62.93 | 2 | |
| GOttackVictim Model=GIN2026.05 | 20.4 | 15.2 | 23.2 | 14.53 | 22.93 | 5.8 | |
| PR-BCD (NA)Victim Model=GSAGE2026.05 | 20.4 | 25.6 | 32 | 30.13 | 31.07 | 4.6 | |
| NETTACKVictim Model=GIN2026.05 | 20.4 | 22.27 | 23.6 | 25.47 | 27.87 | 7 | |
| L1D-RNDVictim Model=GCN2026.05 | 21.87 | 50.93 | 62 | 66.67 | 66.53 | 3 | |
| L1D-RNDVictim Model=GSAGE2026.05 | 22.93 | 40.27 | 44.4 | 50.27 | 52.53 | 3.4 | |
| GOttackVictim Model=GCN2026.05 | 23.47 | 19.2 | 22.53 | 17.33 | 22.8 | 5.8 | |
| GOttackVictim Model=GSAGE2026.05 | 24.67 | 21.2 | 27.87 | 21.33 | 29.07 | 5.6 | |
| PGDVictim Model=GSAGE2026.05 | 24.8 | 27.6 | 30.27 | 33.07 | 37.2 | 3.8 | |
| GOttackVictim Model=GCN2026.05 | 27.07 | 23.73 | 23.33 | 24.8 | 24.67 | 6 | |
| SGAVictim Model=GSAGE2026.05 | 27.6 | 30.53 | 32 | 34.13 | 32.8 | 3.2 | |
| PR-BCD (NA)Victim Model=GIN2026.05 | 27.73 | 25.87 | 38.67 | 38.53 | 38.8 | 4.8 | |
| SGAVictim Model=GIN2026.05 | 28 | 35.07 | 39.07 | 39.47 | 42.4 | 3.8 | |
| FGAVictim Model=GSAGE2026.05 | 28.93 | 34.4 | 35.2 | 39.2 | 40.8 | 1.6 | |
| GOttackVictim Model=GSAGE2026.05 | 31.07 | 23.07 | 30.8 | 26.67 | 33.87 | 5.8 | |
| PR-BCD (NA)Victim Model=GSAGE2026.05 | 31.6 | 38.53 | 44.67 | 43.87 | 44.27 | 3.8 | |
| FGAVictim Model=GCORN, Attack Scenario=Evasion2026.05 | 34.13 | 36.53 | 48.67 | 48.67 | 48.67 | 1.1 | |
| PGDVictim Model=GIN2026.05 | 35.07 | 41.73 | 47.47 | 50.67 | 49.33 | 2.8 | |
| L1D-RNDVictim Model=GCN2026.05 | 35.6 | 56.27 | 65.2 | 69.07 | 68.13 | 2.8 | |
| SGAVictim Model=GSAGE2026.05 | 35.6 | 36.53 | 42 | 44.53 | 40.67 | 4.2 | |
| GOttackVictim Model=GIN2026.05 | 35.73 | 32.4 | 37.33 | 31.73 | 37.87 | 6 | |
| PGDVictim Model=GSAGE2026.05 | 36.27 | 41.6 | 41.33 | 47.6 | 52.67 | 2.8 | |
| L1D-RNDVictim Model=GIN2026.05 | 37.33 | 61.07 | 65.2 | 69.2 | 68.67 | 2.6 | |
| FGAVictim Model=RobustGCN, Attack Scenario=Evasion2026.05 | 38.13 | 45.87 | 45.33 | 51.73 | 49.73 | 1.1 | |
| FGAVictim Model=GIN2026.05 | 40.93 | 46.4 | 53.07 | 58.8 | 54.93 | 1.8 | |
| FGAVictim Model=GSAGE2026.05 | 42.67 | 45.47 | 55.2 | 56.4 | 58.67 | 1 | |
| PGDVictim Model=GCN2026.05 | 44 | 50.53 | 61.07 | 57.73 | 59.47 | 3.6 | |
| SGAVictim Model=GCN2026.05 | 45.47 | 49.07 | 55.6 | 57.33 | 55.33 | 4.4 | |
| SGAVictim Model=GIN2026.05 | 46.27 | 50.8 | 57.73 | 56.13 | 61.6 | 4.4 | |
| PGDVictim Model=GIN2026.05 | 49.33 | 59.07 | 64.93 | 70.27 | 67.47 | 2.8 | |
| PR-BCD (NA)Victim Model=GIN2026.05 | 50 | 48.4 | 58.93 | 59.07 | 58.4 | 4 | |
| SGAVictim Model=GCN2026.05 | 51.47 | 54.67 | 60.13 | 61.87 | 59.07 | 4.6 | |
| PGDVictim Model=GCN2026.05 | 53.47 | 56.8 | 64.13 | 61.87 | 60.53 | 3.2 | |
| PR-BCD (NA)Victim Model=GCN2026.05 | 58 | 67.87 | 70.27 | 67.07 | 73.47 | 1.2 | |
| FGAVictim Model=GIN2026.05 | 61.2 | 67.33 | 70.27 | 71.07 | 68.4 | 1.2 | |
| FGAVictim Model=GCN2026.05 | 62.4 | 58 | 59.87 | 56.4 | 61.07 | 3 | |
| PR-BCD (NA)Victim Model=GCN2026.05 | 64.8 | 70.8 | 70.67 | 67.6 | 74.93 | 1.4 | |
| FGAVictim Model=GCN2026.05 | 66.4 | 61.47 | 62.13 | 60.53 | 63.07 | 3 |