Node Classification on Pubmed (Miss-classification rate, Avg. Rank)
0Miss-classification RateFGA
Evaluation results
| Method | Links | ||
|---|---|---|---|
| FGAAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 0 | 5.93 | |
| FGAAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 0 | 5.93 | |
| FGAAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 0 | 5.93 | |
| FGAAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 0 | 5.93 | |
| FGAAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 0 | 5.93 | |
| PGDAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 0 | 5.13 | |
| PGDAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 0 | 5.13 | |
| PGDAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 0 | 5.13 | |
| PGDAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 0 | 5.13 | |
| PGDAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 0 | 5.13 | |
| FGAAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 0 | 5.73 | |
| FGAAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 0 | 5.73 | |
| FGAAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 0 | 5.73 | |
| FGAAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 0 | 5.73 | |
| FGAAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 0 | 5.73 | |
| PGDAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 0 | 5 | |
| PGDAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 0 | 5 | |
| PGDAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 0 | 5 | |
| PGDAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 0 | 5 | |
| PGDAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 0 | 5 | |
| PR-BCDAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 18.27 | 2.8 | |
| SGAAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 18.27 | 5.93 | |
| PR-BCDAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 18.4 | 2.73 | |
| SGAAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 18.67 | 5.93 | |
| NETTACKAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 21.2 | 1.6 | |
| NETTACKAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 21.2 | 1.33 | |
| SGAAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 21.47 | 5.93 | |
| SGAAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 21.47 | 5.93 | |
| SGAAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 22.93 | 5.93 | |
| GOttackAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 23.07 | 2.93 | |
| GOttackAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 23.07 | 3 | |
| SGAAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 23.33 | 5.93 | |
| SGAAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 24.67 | 5.93 | |
| SGAAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 24.67 | 5.93 | |
| SGAAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 25.6 | 5.93 | |
| L1D-RNDAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 25.73 | 3.73 | |
| PR-BCDAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 25.73 | 2.73 | |
| L1D-RNDAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 25.73 | 4.2 | |
| SGAAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 25.87 | 5.93 | |
| PR-BCDAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 25.87 | 2.8 | |
| L1D-RNDAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 26 | 4.2 | |
| L1D-RNDAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 26.4 | 3.73 | |
| L1D-RNDAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 28.8 | 3.73 | |
| L1D-RNDAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 29.07 | 4.2 | |
| L1D-RNDAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 29.07 | 4.2 | |
| L1D-RNDAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 29.2 | 3.73 | |
| PR-BCDAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 29.87 | 2.73 | |
| GOttackAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 30 | 2.93 | |
| GOttackAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 30.27 | 3 | |
| PR-BCDAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 30.4 | 2.8 | |
| L1D-RNDAttack Scenario=Evasion, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 31.07 | 3.73 | |
| L1D-RNDAttack Scenario=Poison, Perturbation Budget (Δ)=1, Defense Method=NoisyGNN2026.05 | 31.07 | 4.2 | |
| PR-BCDAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 33.07 | 2.73 | |
| PR-BCDAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 33.6 | 2.8 | |
| NETTACKAttack Scenario=Poison, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 34.27 | 1.33 | |
| NETTACKAttack Scenario=Evasion, Perturbation Budget (Δ)=2, Defense Method=NoisyGNN2026.05 | 34.53 | 1.6 | |
| PR-BCDAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 36.53 | 2.73 | |
| GOttackAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 36.8 | 2.93 | |
| PR-BCDAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 37.07 | 2.8 | |
| GOttackAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 37.2 | 3 | |
| GOttackAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 41.87 | 2.93 | |
| GOttackAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 42.27 | 3 | |
| NETTACKAttack Scenario=Evasion, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 46.27 | 1.6 | |
| NETTACKAttack Scenario=Poison, Perturbation Budget (Δ)=3, Defense Method=NoisyGNN2026.05 | 46.8 | 1.33 | |
| GOttackAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 48.13 | 2.93 | |
| GOttackAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 49.2 | 3 | |
| NETTACKAttack Scenario=Evasion, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 52.53 | 1.6 | |
| NETTACKAttack Scenario=Poison, Perturbation Budget (Δ)=4, Defense Method=NoisyGNN2026.05 | 52.93 | 1.33 | |
| NETTACKAttack Scenario=Evasion, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 60.53 | 1.6 | |
| NETTACKAttack Scenario=Poison, Perturbation Budget (Δ)=5, Defense Method=NoisyGNN2026.05 | 60.53 | 1.33 |