Node Classification on CiteSeer (test) Robustness
72.87Accuracy (0% Perturbation)PTDNet
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| PTDNetModel Category=Robust GNN, Attack Protocol=Mettack2023.04 | 72.87 | 64.08 | 57.03 | 54.04 | 41.81 | 38.93 | — | |
| GraphNASModel Category=Graph NAS, Attack Protocol=Mettack2023.04 | 72.79 | 61.01 | 53.55 | 55.98 | 39.06 | 36.9 | — | |
| G-RNA w/o robModel Category=Graph NAS, Attack Protocol=Mettack2023.04 | 72.57 | 65.48 | 56.59 | 55.81 | 48.53 | 43.76 | — | |
| RGCNModel Category=Robust GNN, Attack Protocol=Mettack2023.04 | 72.43 | 63.3 | 55.9 | 53.83 | 43.65 | 39.99 | — | |
| GCNModel Category=Vanilla GNN, Attack Protocol=Mettack2023.04 | 72.35 | 63.48 | 56.94 | 55.01 | 43.73 | 40.47 | — | |
| GCN-JKModel Category=Vanilla GNN, Attack Protocol=Mettack2023.04 | 72.14 | 62.16 | 54.25 | 50.61 | 40.06 | 35.07 | — | |
| DropEdgeModel Category=Robust GNN, Attack Protocol=Mettack2023.04 | 71.84 | 63.33 | 55.41 | 50.81 | 40.61 | 37.46 | — | |
| GATModel Category=Vanilla GNN, Attack Protocol=Mettack2023.04 | 71.75 | 61.47 | 53.92 | 49.68 | 41.31 | 37.25 | — | |
| Pro-GNNModel Category=Robust GNN, Attack Protocol=Mettack2023.04 | 71.74 | 66.29 | 64.6 | 63.96 | 62.46 | 55.73 | — | |
| GAT-JKModel Category=Vanilla GNN, Attack Protocol=Mettack2023.04 | 71.52 | 63.9 | 57.16 | 52.8 | 44.26 | 39.63 | — | |
| G-RNAModel Category=Graph NAS, Attack Protocol=Mettack2023.04 | 71.32 | 68.71 | 65.84 | 65.29 | 62.58 | 61.33 | — | |
| GASSOModel Category=Graph NAS, Attack Protocol=Mettack2023.04 | 71.08 | 61.31 | 52.17 | 50.43 | 43.72 | 36.84 | — | |
| GCN-JaccardModel Category=Robust GNN, Attack Protocol=Mettack2023.04 | 71.03 | 64.56 | 57.57 | 55.31 | 50.17 | 45.78 | — | |
| PATTON-PTshot=8-shot, mode=fine-tuned, pretrained=true2025.11 | 66.1 | — | — | — | — | — | — | |
| PATTONshot=8-shot, mode=fine-tuned2025.11 | 64.2 | — | — | — | — | — | — | |
| PLM+SAGEshot=8-shot, mode=fine-tuned2025.11 | 63 | — | — | — | — | — | — | |
| Odin PGshot=8-shot, mode=fine-tuned2025.11 | 60.7 | — | — | — | — | — | — | |
| Odin VAshot=8-shot, mode=fine-tuned2025.11 | 60.1 | — | — | — | — | — | — | |
| Odin MEshot=8-shot, mode=fine-tuned2025.11 | 59.6 | — | — | — | — | — | — | |
| Odin-Lshot=8-shot, mode=fine-tuned, variant=2PG2025.11 | 59.4 | — | — | — | — | — | — | |
| Odin-Lshot=8-shot, mode=fine-tuned, variant=2,4PG2025.11 | 56.7 | — | — | — | — | — | — | |
| GraphSAGEshot=8-shot2025.11 | 53.3 | — | — | — | — | — | — | |
| GraphSAGE++shot=8-shot2025.11 | 50 | — | — | — | — | — | — | |
| SciBERTshot=8-shot, mode=fine-tuned2025.11 | 48.9 | — | — | — | — | — | — | |
| ModernBERTshot=8-shot, mode=fine-tuned2025.11 | 22.4 | — | — | — | — | — | — | |
| DistillBERTshot=8-shot, mode=fine-tuned2025.11 | 19.9 | — | — | — | — | — | — | |
| LinkBERTshot=8-shot, mode=fine-tuned2025.11 | 18.2 | — | — | — | — | — | — | |
| DGIShot=5-shot, Attack=Non-targeted feature attack, λ=0.82025.11 | — | — | — | — | — | — | 44.3 | |
| DGIshots=5-shot, attack_type=non-targeted feature attack, lambda=0.42025.11 | — | — | — | — | — | — | 53.6 | |
| GATShot=5-shot, Attack=Non-targeted feature attack, λ=0.82025.11 | — | — | — | — | — | — | 45.7 | |
| GATshots=5-shot, attack_type=non-targeted feature attack, lambda=0.42025.11 | — | — | — | — | — | — | 53.2 | |
| GCNShot=5-shot, Attack=Non-targeted feature attack, λ=0.82025.11 | — | — | — | — | — | — | 36.3 | |
| GCNshots=5-shot, attack_type=non-targeted feature attack, lambda=0.42025.11 | — | — | — | — | — | — | 42.6 | |
| GCOPEShot=5-shot, Attack=Non-targeted feature attack, λ=0.82025.11 | — | — | — | — | — | — | 43.4 | |
| GCOPEshots=5-shot, attack_type=non-targeted feature attack, lambda=0.42025.11 | — | — | — | — | — | — | 54.1 | |
| GraphBridgeShot=5-shot, Attack=Non-targeted feature attack, λ=0.82025.11 | — | — | — | — | — | — | 46.2 | |
| GraphBridgeshots=5-shot, attack_type=non-targeted feature attack, lambda=0.42025.11 | — | — | — | — | — | — | 57.7 | |
| GRAPHCLShot=5-shot, Attack=Non-targeted feature attack, λ=0.82025.11 | — | — | — | — | — | — | 47.4 | |
| GRAPHCLshots=5-shot, attack_type=non-targeted feature attack, lambda=0.42025.11 | — | — | — | — | — | — | 54.5 | |
| GraphPromptShot=5-shot, Attack=Non-targeted feature attack, λ=0.82025.11 | — | — | — | — | — | — | 42.5 | |
| GraphPromptshots=5-shot, attack_type=non-targeted feature attack, lambda=0.42025.11 | — | — | — | — | — | — | 55.1 | |
| MDGFMShot=5-shot, Attack=Non-targeted feature attack, λ=0.82025.11 | — | — | — | — | — | — | 53 | |
| MDGFMshots=5-shot, attack_type=non-targeted feature attack, lambda=0.42025.11 | — | — | — | — | — | — | 60.4 | |
| MDGPTShot=5-shot, Attack=Non-targeted feature attack, λ=0.82025.11 | — | — | — | — | — | — | 50.1 | |
| MDGPTshots=5-shot, attack_type=non-targeted feature attack, lambda=0.42025.11 | — | — | — | — | — | — | 51.4 | |
| SA2GFMShot=5-shot, Attack=Non-targeted feature attack, λ=0.82025.11 | — | — | — | — | — | — | 53.4 | |
| SA2GFMshots=5-shot, attack_type=non-targeted feature attack, lambda=0.42025.11 | — | — | — | — | — | — | 62.9 |