Node Classification on CORA (Miss-classification rate and Avg. Rank)
20.93Miss-classification RateFGA
Evaluation results
| Method | Links | ||
|---|---|---|---|
| FGAAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 20.93 | 5.93 | |
| SGAAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 20.93 | 5.93 | |
| SGAAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 22.27 | 5.93 | |
| GOttackAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 22.8 | 2.93 | |
| FGAAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 23.2 | 5.73 | |
| NETTACKAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 23.33 | 1.6 | |
| SGAAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 23.33 | 5.93 | |
| PGDAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 24.67 | 5.13 | |
| FGAAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 25.07 | 5.93 | |
| PR-BCDAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 25.07 | 2.73 | |
| SGAAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 25.47 | 5.93 | |
| GOttackAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 26 | 3 | |
| PR-BCDAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 26.27 | 2.8 | |
| PGDAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 27.07 | 5 | |
| NETTACKAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 27.6 | 1.33 | |
| SGAAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 27.73 | 5.93 | |
| L1D-RNDAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 28.4 | 3.73 | |
| L1D-RNDAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 29.07 | 4.2 | |
| SGAAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 30.27 | 5.93 | |
| SGAAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 30.4 | 5.93 | |
| FGAAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 30.67 | 5.73 | |
| PGDAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 31.47 | 5.13 | |
| L1D-RNDAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 31.6 | 3.73 | |
| GOttackAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 31.6 | 2.93 | |
| FGAAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 32 | 5.93 | |
| L1D-RNDAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 32.27 | 4.2 | |
| SGAAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 33.33 | 5.93 | |
| PGDAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 35.47 | 5 | |
| NETTACKAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 35.87 | 1.6 | |
| PR-BCDAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 36.13 | 2.73 | |
| GOttackAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 36.53 | 3 | |
| FGAAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 38.13 | 5.73 | |
| SGAAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 38.53 | 5.93 | |
| FGAAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 38.67 | 5.93 | |
| L1D-RNDAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 38.8 | 3.73 | |
| PR-BCDAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 40.27 | 2.8 | |
| PGDAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 40.67 | 5.13 | |
| L1D-RNDAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 40.8 | 3.73 | |
| L1D-RNDAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 41.2 | 3.73 | |
| L1D-RNDAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 41.33 | 4.2 | |
| SGAAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 41.73 | 5.93 | |
| FGAAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 42 | 5.93 | |
| GOttackAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 42.13 | 2.93 | |
| L1D-RNDAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 42.93 | 4.2 | |
| L1D-RNDAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 43.07 | 4.2 | |
| NETTACKAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 44.27 | 1.33 | |
| PGDAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 44.93 | 5.13 | |
| PGDAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 46.27 | 5 | |
| GOttackAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 46.27 | 3 | |
| FGAAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 46.67 | 5.73 | |
| PR-BCDAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 47.73 | 2.73 | |
| PGDAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 49.47 | 5.13 | |
| NETTACKAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 50.27 | 1.6 | |
| PGDAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 50.4 | 5 | |
| FGAAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 51.6 | 5.73 | |
| PR-BCDAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 52.13 | 2.8 | |
| PR-BCDAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 52.53 | 2.73 | |
| GOttackAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 52.93 | 2.93 | |
| PGDAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 56.67 | 5 | |
| NETTACKAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 57.47 | 1.33 | |
| PR-BCDAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 59.73 | 2.73 | |
| GOttackAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 60 | 3 | |
| NETTACKAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 60.27 | 1.6 | |
| PR-BCDAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 60.67 | 2.8 | |
| GOttackAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 61.47 | 2.93 | |
| NETTACKAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 64.67 | 1.33 | |
| PR-BCDAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 64.8 | 2.8 | |
| GOttackAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 66.93 | 3 | |
| NETTACKAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 69.07 | 1.6 | |
| NETTACKAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 73.6 | 1.33 |