Node Classification on PUBMED (Miss-classification rate Δ=1 to Δ=5, Avg. Rank)
9.73Miss-classification Rate (Δ=1)L1D-RND
Evaluation Results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| L1D-RNDAttack Scenario=Poison, Victim Model=GCN2026.05 | 9.73 | 15.47 | 17.33 | 19.33 | 23.2 | 7 | |
| L1D-RNDAttack Scenario=Evasion, Victim Model=GSAGE2026.05 | 10 | 18 | 16.4 | 14.27 | 13.33 | 6.27 | |
| L1D-RNDAttack Scenario=Poison, Victim Model=GSAGE2026.05 | 10.13 | 17.73 | 18 | 14.27 | 14.8 | 6.93 | |
| L1D-RNDAttack Scenario=Evasion, Victim Model=GCN2026.05 | 10.93 | 15.47 | 17.2 | 18.8 | 23.6 | 7 | |
| L1D-RNDAttack Scenario=Evasion, Victim Model=GIN2026.05 | 13.33 | 23.07 | 26.67 | 22.4 | 22.27 | 6.6 | |
| L1D-RNDAttack Scenario=Poison, Victim Model=GIN2026.05 | 14.67 | 27.07 | 29.07 | 23.33 | 24.27 | 7 | |
| PR-BCDAttack Stage=Poison, Victim Model=GIN2026.05 | 15.33 | 27.2 | 29.73 | 34.67 | 36.27 | 3.67 | |
| PR-BCDAttack Stage=Evasion, Victim Model=GIN2026.05 | 16.4 | 27.47 | 29.33 | 34.8 | 34.93 | 3.07 | |
| PR-BCD (NA)Attack Scenario=Poison, Victim Model=PNA2026.05 | 19.07 | 24.13 | 24.93 | 26.13 | 29.2 | 4.93 | |
| PR-BCD (NA)Attack Scenario=Poison, Victim Model=GSAGE2026.05 | 19.87 | 25.07 | 25.47 | 28 | 28.4 | 4.07 | |
| PR-BCD (NA)Attack Scenario=Evasion, Victim Model=PNA2026.05 | 20.27 | 23.73 | 24.93 | 25.87 | 28.53 | 4.6 | |
| NETTACKAttack Stage=Evasion, Victim Model=GIN2026.05 | 21.2 | 37.73 | 46.67 | 50.4 | 49.6 | 1.67 | |
| PGDAttack Stage=Evasion, Victim Model=GIN2026.05 | 21.2 | 26.27 | 30 | 32.53 | 36 | 3.93 | |
| PR-BCDAttack Stage=Poison, Victim Model=GSAGE2026.05 | 21.47 | 24.27 | 26.4 | 27.6 | 28.8 | 3.2 | |
| NETTACKAttack Stage=Poison, Victim Model=GIN2026.05 | 21.6 | 38 | 46.27 | 49.6 | 49.33 | 1.53 | |
| PR-BCD (NA)Attack Scenario=Evasion, Victim Model=GSAGE2026.05 | 21.73 | 25.73 | 27.2 | 28.13 | 28.8 | 3.93 | |
| PGDAttack Stage=Poison, Victim Model=GIN2026.05 | 21.73 | 27.07 | 31.2 | 33.47 | 37.73 | 4.4 | |
| NETTACKAttack Stage=Poison, Victim Model=GSAGE2026.05 | 22 | 34.13 | 40.27 | 44.13 | 44.93 | 1.4 | |
| NETTACKAttack Stage=Evasion, Victim Model=GSAGE2026.05 | 22.4 | 35.07 | 40.67 | 44.53 | 45.87 | 1.47 | |
| SGAAttack Stage=Poison, Victim Model=GSAGE2026.05 | 22.4 | 31.07 | 34.13 | 38.93 | 37.87 | 3.67 | |
| FGAAttack Stage=Evasion, Victim Model=GIN2026.05 | 22.53 | 37.87 | 38 | 41.47 | 45.07 | 2.53 | |
| PR-BCDAttack Stage=Evasion, Victim Model=GSAGE2026.05 | 22.67 | 25.33 | 27.07 | 27.6 | 29.87 | 3.13 | |
| FGAAttack Scenario=Poison, Victim Model=GSAGE2026.05 | 23.33 | 31.87 | 35.73 | 39.2 | 42.4 | 2.67 | |
| PGDAttack Scenario=Poison, Victim Model=GSAGE2026.05 | 23.33 | 28.8 | 28.93 | 29.87 | 31.87 | 5 | |
| SGAAttack Stage=Poison, Victim Model=GIN2026.05 | 23.33 | 31.6 | 36.93 | 40.4 | 42.8 | 3.4 | |
| PGDAttack Scenario=Evasion, Victim Model=GSAGE2026.05 | 23.47 | 29.33 | 29.47 | 30.13 | 32 | 5 | |
| SGAAttack Stage=Evasion, Victim Model=GIN2026.05 | 23.6 | 32 | 35.73 | 41.07 | 43.2 | 3.8 | |
| FGAAttack Scenario=Evasion, Victim Model=GSAGE2026.05 | 23.73 | 33.2 | 36.13 | 39.47 | 42.4 | 3 | |
| NETTACKAttack Scenario=Poison, Victim Model=GSAGE2026.05 | 23.73 | 32.53 | 39.6 | 42.53 | 42.27 | 1.53 | |
| FGAAttack Stage=Poison, Victim Model=GSAGE2026.05 | 23.73 | 31.47 | 37.07 | 43.33 | 45.73 | 2.8 | |
| FGAAttack Stage=Poison, Victim Model=GIN2026.05 | 23.87 | 37.33 | 38.8 | 41.07 | 44.27 | 2 | |
| PR-BCDAttack Stage=Poison, Victim Model=PNA2026.05 | 23.87 | 27.73 | 30.53 | 29.33 | 31.33 | 4.07 | |
| GOttackAttack Scenario=Poison, Victim Model=GSAGE2026.05 | 24.13 | 29.87 | 29.33 | 33.2 | 33.2 | 3.67 | |
| PGDAttack Stage=Poison, Victim Model=GSAGE2026.05 | 24.13 | 29.87 | 29.07 | 32.67 | 31.6 | 3.93 | |
| SGAAttack Stage=Evasion, Victim Model=GSAGE2026.05 | 24.27 | 30.53 | 34.53 | 38.53 | 38.4 | 3.8 | |
| PR-BCDAttack Stage=Evasion, Victim Model=PNA2026.05 | 24.27 | 27.73 | 31.07 | 29.2 | 32 | 3.73 | |
| NETTACKAttack Scenario=Evasion, Victim Model=GSAGE2026.05 | 24.4 | 31.73 | 39.87 | 42.93 | 42.53 | 1.53 | |
| SGAAttack Scenario=Evasion, Victim Model=GSAGE2026.05 | 24.4 | 31.07 | 32.53 | 36.13 | 36.53 | 4.6 | |
| PGDAttack Stage=Evasion, Victim Model=GSAGE2026.05 | 24.67 | 29.33 | 29.47 | 32.4 | 31.07 | 3.6 | |
| GOttackAttack Scenario=Evasion, Victim Model=GSAGE2026.05 | 24.8 | 30.53 | 31.2 | 34.13 | 33.6 | 3.67 | |
| PR-BCD (NA)Attack Scenario=Poison, Victim Model=GIN2026.05 | 25.07 | 30.4 | 31.47 | 35.47 | 36.4 | 4.33 | |
| FGAAttack Stage=Evasion, Victim Model=GSAGE2026.05 | 25.07 | 32.13 | 36.8 | 42.8 | 46.53 | 3 | |
| SGAAttack Scenario=Poison, Victim Model=GSAGE2026.05 | 25.2 | 29.87 | 32.13 | 36.27 | 35.47 | 4.13 | |
| PR-BCD (NA)Attack Scenario=Evasion, Victim Model=GIN2026.05 | 25.73 | 30 | 29.87 | 34 | 36.13 | 3.73 | |
| PGDAttack Scenario=Evasion, Victim Model=GIN2026.05 | 28.13 | 37.33 | 36.8 | 40 | 39.87 | 4.93 | |
| PGDAttack Scenario=Poison, Victim Model=GIN2026.05 | 28.4 | 38 | 36.8 | 41.73 | 40.8 | 5.53 | |
| PGDAttack Scenario=Evasion, Victim Model=PNA2026.05 | 28.53 | 28.27 | 30.53 | 30.93 | 30.93 | 5.93 | |
| GOttackAttack Scenario=Evasion, Victim Model=PNA2026.05 | 28.93 | 40.53 | 37.6 | 39.2 | 40.4 | 4.07 | |
| PGDAttack Stage=Evasion, Victim Model=PNA2026.05 | 28.93 | 33.2 | 36 | 37.6 | 36.4 | 4.33 | |
| PGDAttack Scenario=Poison, Victim Model=PNA2026.05 | 29.07 | 29.07 | 31.33 | 32.53 | 30.93 | 6 | |
| PGDAttack Stage=Poison, Victim Model=PNA2026.05 | 29.07 | 34.67 | 36.53 | 38.27 | 37.47 | 4.47 | |
| GOttackAttack Scenario=Poison, Victim Model=PNA2026.05 | 29.47 | 37.87 | 37.73 | 40.93 | 39.73 | 3.6 | |
| PR-BCD (NA)Attack Scenario=Evasion, Victim Model=GCN2026.05 | 29.6 | 36.53 | 45.73 | 51.47 | 54.13 | 2.47 | |
| PR-BCD (NA)Attack Scenario=Poison, Victim Model=GCN2026.05 | 29.6 | 36.53 | 45.47 | 50.13 | 54.4 | 3 | |
| PR-BCDAttack Stage=Evasion, Victim Model=GCN2026.05 | 30.13 | 35.73 | 42.93 | 49.6 | 53.33 | 2.33 | |
| FGAAttack Scenario=Evasion, Victim Model=PNA2026.05 | 30.27 | 39.87 | 42.13 | 48.67 | 50.8 | 3.87 | |
| NETTACKAttack Scenario=Evasion, Victim Model=PNA2026.05 | 30.53 | 39.33 | 46.8 | 50.8 | 52.8 | 1.53 | |
| NETTACKAttack Scenario=Poison, Victim Model=PNA2026.05 | 30.53 | 38.8 | 45.87 | 49.33 | 53.33 | 1.53 | |
| PR-BCDAttack Stage=Poison, Victim Model=GCN2026.05 | 30.67 | 36.67 | 43.33 | 48.93 | 53.2 | 2.67 | |
| SGAAttack Scenario=Evasion, Victim Model=PNA2026.05 | 30.93 | 35.07 | 36.8 | 43.47 | 44.93 | 4.27 | |
| SGAAttack Scenario=Poison, Victim Model=PNA2026.05 | 31.2 | 37.6 | 36.93 | 43.87 | 43.07 | 3.67 | |
| FGAAttack Scenario=Poison, Victim Model=PNA2026.05 | 31.33 | 37.87 | 41.73 | 46.13 | 48.13 | 2.6 | |
| GOttackAttack Scenario=Evasion, Victim Model=GIN2026.05 | 31.87 | 45.73 | 44.53 | 48 | 46.8 | 3.27 | |
| NETTACKAttack Scenario=Poison, Victim Model=GIN2026.05 | 32 | 45.2 | 50.8 | 54.67 | 56.53 | 1.47 | |
| NETTACKAttack Stage=Evasion, Victim Model=PNA2026.05 | 32 | 44.4 | 55.87 | 60.13 | 63.47 | 1.2 | |
| FGAAttack Scenario=Evasion, Victim Model=GIN2026.05 | 32.53 | 44.53 | 45.33 | 54.67 | 55.47 | 3.6 | |
| FGAAttack Scenario=Poison, Victim Model=GIN2026.05 | 32.93 | 44.67 | 45.47 | 55.6 | 55.73 | 2.73 | |
| NETTACKAttack Scenario=Evasion, Victim Model=GIN2026.05 | 33.6 | 45.47 | 51.07 | 53.6 | 55.87 | 1.27 | |
| PGDAttack Scenario=Poison, Victim Model=GCN2026.05 | 33.6 | 40.67 | 40.93 | 45.07 | 45.47 | 5.47 | |
| NETTACKAttack Scenario=Evasion, Victim Model=GCN2026.05 | 33.73 | 55.73 | 57.47 | 58.67 | 58.67 | 2.2 | |
| GOttackAttack Scenario=Poison, Victim Model=GIN2026.05 | 33.87 | 46.67 | 45.2 | 47.2 | 47.2 | 3.07 | |
| PGDAttack Scenario=Evasion, Victim Model=GCN2026.05 | 34.13 | 40.67 | 40.93 | 44.8 | 44.93 | 4.93 | |
| NETTACKAttack Scenario=Poison, Victim Model=GCN2026.05 | 34.13 | 54.8 | 57.47 | 58.4 | 58.4 | 2.07 | |
| SGAAttack Scenario=Poison, Victim Model=GCN2026.05 | 34.13 | 41.6 | 50.93 | 54 | 54.4 | 4.93 | |
| SGAAttack Stage=Poison, Victim Model=PNA2026.05 | 34.13 | 42 | 46.27 | 52 | 54.27 | 3.13 | |
| SGAAttack Scenario=Evasion, Victim Model=GCN2026.05 | 34.27 | 42.13 | 51.33 | 54.27 | 54.8 | 5.13 | |
| SGAAttack Scenario=Poison, Victim Model=GIN2026.05 | 34.4 | 41.6 | 44 | 47.73 | 49.2 | 3.87 | |
| SGAAttack Stage=Evasion, Victim Model=PNA2026.05 | 34.4 | 40.4 | 46.8 | 51.73 | 53.2 | 3.07 | |
| NETTACKAttack Stage=Poison, Victim Model=PNA2026.05 | 34.53 | 44.8 | 56.67 | 59.47 | 62.67 | 1.2 | |
| PGDAttack Stage=Poison, Victim Model=GCN2026.05 | 34.8 | 38.8 | 42.93 | 46.13 | 45.73 | 4.27 | |
| NETTACKAttack Stage=Poison, Victim Model=GCN2026.05 | 34.93 | 53.87 | 58.27 | 58.93 | 58.8 | 1.67 | |
| PGDAttack Stage=Evasion, Victim Model=GCN2026.05 | 35.07 | 38.8 | 43.2 | 45.47 | 46.27 | 3.87 | |
| SGAAttack Stage=Evasion, Victim Model=GCN2026.05 | 35.07 | 40.13 | 49.87 | 54.67 | 56 | 4 | |
| SGAAttack Stage=Poison, Victim Model=GCN2026.05 | 35.07 | 40.67 | 49.6 | 55.33 | 55.87 | 3.87 | |
| NETTACKAttack Stage=Evasion, Victim Model=GCN2026.05 | 35.2 | 54.27 | 58.27 | 59.07 | 58.93 | 2 | |
| FGAAttack Scenario=Poison, Victim Model=GCN2026.05 | 35.33 | 47.47 | 55.33 | 58.53 | 58 | 2.93 | |
| FGAAttack Scenario=Evasion, Victim Model=GCN2026.05 | 35.6 | 47.6 | 55.33 | 58.4 | 58 | 3.4 | |
| GOttackAttack Scenario=Poison, Victim Model=GCN2026.05 | 35.6 | 47.6 | 55.73 | 58.13 | 59.2 | 2.6 | |
| GOttackAttack Scenario=Evasion, Victim Model=GCN2026.05 | 35.87 | 48 | 56.13 | 58.13 | 59.6 | 2.87 | |
| SGAAttack Scenario=Evasion, Victim Model=GIN2026.05 | 35.87 | 39.33 | 44.13 | 48 | 50.27 | 4.6 | |
| FGAAttack Stage=Evasion, Victim Model=PNA2026.05 | 36.27 | 49.33 | 52.8 | 59.2 | 62.53 | 2.67 | |
| FGAAttack Stage=Poison, Victim Model=PNA2026.05 | 36.53 | 50.53 | 53.6 | 58.53 | 59.2 | 2.13 | |
| FGAAttack Stage=Evasion, Victim Model=GCN2026.05 | 36.8 | 49.33 | 56 | 57.07 | 59.2 | 2.8 | |
| FGAAttack Stage=Poison, Victim Model=GCN2026.05 | 37.2 | 49.33 | 56.8 | 56.8 | 59.07 | 2.53 | |
| L1D-RNDAttack Scenario=Evasion, Victim Model=PNA2026.05 | 39.33 | 18.27 | 19.2 | 20.27 | 24.27 | 3.73 | |
| L1D-RNDAttack Scenario=Poison, Victim Model=PNA2026.05 | 39.33 | 19.6 | 20.67 | 20.4 | 23.47 | 5.67 |