Node Classification on Cora (test) (Adversarial Robustness - LRBCD/PRBCD)
82.5Test Accuracy (Clean)GCN Self-trained
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| GCN Self-trainedBackbone=GCN, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=✗2026.05 | 82.5 | 70.7 | 65 | 60.7 | 52.7 | 48.4 | 37.2 | |
| GPR-GAE APPNP SelfBackbone=APPNP, Adversarial Purification=✓, Pseudo-labeling=✓, Adversarial Training Protocol=✗2026.05 | 82.5 | 79.6 | 77.3 | 77.9 | 71.4 | 76.5 | 65.2 | |
| APPNP Adv.-trained (LRBCD)Backbone=APPNP, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=LRBCD2026.05 | 82.4 | 71.5 | 66.8 | 63.4 | 54 | 54.4 | 35.6 | |
| APPNP Self-trainedBackbone=APPNP, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=✗2026.05 | 82.3 | 70.6 | 68.2 | 62.1 | 54.7 | 51.1 | 37.7 | |
| APPNP VanillaBackbone=APPNP, Adversarial Purification=✗, Pseudo-labeling=✗, Adversarial Training Protocol=✗2026.05 | 82.1 | 66.2 | 64.5 | 56.4 | 50.9 | 46 | 32.6 | |
| GPR-GAE GCN SelfBackbone=GCN, Adversarial Purification=✓, Pseudo-labeling=✓, Adversarial Training Protocol=✗2026.05 | 81.6 | 78.5 | 77.3 | 76.6 | 69 | 75 | 60.8 | |
| GPR-GAE GPRGNN VanillaBackbone=GPRGNN, Adversarial Purification=✓, Pseudo-labeling=✗, Adversarial Training Protocol=✗2026.05 | 81.6 | 77.4 | 77 | 76.4 | 70.6 | 75.6 | 64.2 | |
| GPR-GAE APPNP VanillaBackbone=APPNP, Adversarial Purification=✓, Pseudo-labeling=✗, Adversarial Training Protocol=✗2026.05 | 81.6 | 77.6 | 77.1 | 77.3 | 72.4 | 76.4 | 64.3 | |
| EvenNetAdversarial Purification=✗, Pseudo-labeling=✗, Adversarial Training Protocol=✗2026.05 | 81.4 | 65.2 | 65.7 | 54.9 | 51.7 | 45.7 | 35.6 | |
| GPRGNN VanillaBackbone=GPRGNN, Adversarial Purification=✗, Pseudo-labeling=✗, Adversarial Training Protocol=✗2026.05 | 81.4 | 65.6 | 63 | 55.6 | 49.4 | 44.2 | 33.1 | |
| APPNP Adv.-trained (PRBCD)Backbone=APPNP, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=PRBCD2026.05 | 81.2 | 71.2 | 67.6 | 64.1 | 55.3 | 54.1 | 37.8 | |
| GPRGNN Self-trainedBackbone=GPRGNN, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=✗2026.05 | 81.1 | 68.5 | 65.5 | 60.2 | 51.8 | 51.9 | 36.8 | |
| GAT Adv.-trained (LRBCD)Backbone=GAT, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=LRBCD2026.05 | 80.7 | 67.4 | 62 | 59.4 | 48.4 | 50.5 | 32.2 | |
| GPR-GAE GPRGNN SelfBackbone=GPRGNN, Adversarial Purification=✓, Pseudo-labeling=✓, Adversarial Training Protocol=✗2026.05 | 80.7 | 77.2 | 75.9 | 75.5 | 70.2 | 74.7 | 61.6 | |
| GCN Adv.-trained (LRBCD)Backbone=GCN, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=LRBCD2026.05 | 80.5 | 70.4 | 63.8 | 62.8 | 51.1 | 52.6 | 33.4 | |
| GCN Adv.-trained (PRBCD)Backbone=GCN, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=PRBCD2026.05 | 80.3 | 69.5 | 64 | 61.6 | 51.7 | 51.7 | 34.6 | |
| GPRGNN Adv.-trained (LRBCD)Backbone=GPRGNN, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=LRBCD2026.05 | 80 | 71.2 | 65.4 | 64.8 | 54 | 57.7 | 38.2 | |
| GPRGNN Adv.-trained (PRBCD)Backbone=GPRGNN, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=PRBCD2026.05 | 79.5 | 73.2 | 68 | 68.5 | 61.1 | 62.8 | 48.5 | |
| GCN VanillaBackbone=GCN, Adversarial Purification=✗, Pseudo-labeling=✗, Adversarial Training Protocol=✗2026.05 | 79.4 | 64.2 | 60.1 | 51.2 | 46.9 | 40.5 | 29.3 | |
| GPR-GAE GCN VanillaBackbone=GCN, Adversarial Purification=✓, Pseudo-labeling=✗, Adversarial Training Protocol=✗2026.05 | 79.4 | 75.9 | 75.6 | 74.1 | 69.7 | 72.5 | 61.3 | |
| GAT Self-trainedBackbone=GAT, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=✗2026.05 | 79.4 | 53.5 | 53 | 34.9 | 36.5 | 24.1 | 24.8 | |
| GPR-GAE GAT SelfBackbone=GAT, Adversarial Purification=✓, Pseudo-labeling=✓, Adversarial Training Protocol=✗2026.05 | 79.4 | 74.9 | 74 | 72.8 | 69.3 | 71.7 | 60.5 | |
| GAT Adv.-trained (PRBCD)Backbone=GAT, Adversarial Purification=✗, Pseudo-labeling=✓, Adversarial Training Protocol=PRBCD2026.05 | 78.8 | 65.2 | 62.1 | 50.6 | 51.2 | 38.1 | 39 | |
| SoftMedianGDCAdversarial Purification=✗, Pseudo-labeling=✗, Adversarial Training Protocol=✗2026.05 | 77.4 | 69.1 | 67.3 | 64.1 | 60 | 59.1 | 48.2 | |
| GAT VanillaBackbone=GAT, Adversarial Purification=✗, Pseudo-labeling=✗, Adversarial Training Protocol=✗2026.05 | 76.4 | 50.2 | 50.5 | 29.5 | 36.2 | 19.8 | 21.4 | |
| GPR-GAE GAT VanillaBackbone=GAT, Adversarial Purification=✓, Pseudo-labeling=✗, Adversarial Training Protocol=✗2026.05 | 76 | 71.3 | 71.8 | 69 | 65.1 | 67.1 | 59.9 |