Node Classification on SQUIRREL vanilla (test)
1.33Miss-classification RateNETTACK
Evaluation results
| Method | Links | ||
|---|---|---|---|
| NETTACKAttack Type=Evasion, Victim Model=GCN, Perturbation Budget (∆)=32026.05 | 1.33 | 7 | |
| NETTACKAttack Type=Evasion, Victim Model=GCN, Perturbation Budget (∆)=22026.05 | 1.47 | 7 | |
| NETTACKAttack Type=Evasion, Victim Model=GCN, Perturbation Budget (∆)=42026.05 | 1.6 | 7 | |
| NETTACKAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=22026.05 | 1.73 | 7 | |
| NETTACKAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=52026.05 | 1.73 | 7 | |
| NETTACKAttack Type=Evasion, Victim Model=GCN, Perturbation Budget (∆)=12026.05 | 1.87 | 7 | |
| NETTACKAttack Type=Poison, Victim Model=GCN, Perturbation Budget (∆)=22026.05 | 1.87 | 7 | |
| NETTACKAttack Type=Poison, Victim Model=GCN, Perturbation Budget (∆)=32026.05 | 2 | 7 | |
| NETTACKAttack Type=Poison, Victim Model=GCN, Perturbation Budget (∆)=42026.05 | 2 | 7 | |
| NETTACKAttack Type=Evasion, Victim Model=GCN, Perturbation Budget (∆)=52026.05 | 2.13 | 7 | |
| NETTACKAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=12026.05 | 2.13 | 7 | |
| NETTACKAttack Type=Poison, Victim Model=GCN, Perturbation Budget (∆)=52026.05 | 2.27 | 7 | |
| NETTACKAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=42026.05 | 2.27 | 7 | |
| NETTACKAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=32026.05 | 2.67 | 7 | |
| NETTACKAttack Type=Poison, Victim Model=GCN, Perturbation Budget (∆)=12026.05 | 2.8 | 7 | |
| GOttackAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=22026.05 | 3.73 | 6 | |
| NETTACKAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=22026.05 | 3.73 | 7 | |
| GOttackAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=32026.05 | 4.27 | 6 | |
| NETTACKAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=52026.05 | 4.53 | 7 | |
| NETTACKAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=32026.05 | 5.07 | 7 | |
| GOttackAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=12026.05 | 5.33 | 6 | |
| GOttackAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=42026.05 | 5.33 | 6 | |
| GOttackAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=52026.05 | 5.6 | 6 | |
| NETTACKAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=42026.05 | 6 | 7 | |
| NETTACKAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=12026.05 | 6.13 | 7 | |
| GOttackAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=22026.05 | 7.73 | 6 | |
| 1D-RNDAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=12026.05 | 7.87 | 5.4 | |
| NETTACKAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=12026.05 | 7.87 | 6.4 | |
| GOttackAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=32026.05 | 8.27 | 6 | |
| GOttackAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=42026.05 | 8.93 | 6 | |
| 1D-RNDAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=22026.05 | 9.33 | 5.4 | |
| GOttackAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=12026.05 | 9.6 | 6 | |
| GOttackAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=52026.05 | 10.27 | 6 | |
| PGDAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=12026.05 | 10.4 | 4.5 | |
| GOttackAttack Type=Evasion, Victim Model=GCN, Perturbation Budget (∆)=22026.05 | 10.93 | 6 | |
| GOttackAttack Type=Evasion, Victim Model=GCN, Perturbation Budget (∆)=42026.05 | 11.2 | 6 | |
| GOttackAttack Type=Poison, Victim Model=GCN, Perturbation Budget (∆)=42026.05 | 12 | 6 | |
| NETTACKAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=22026.05 | 12 | 6.4 | |
| GOttackAttack Type=Poison, Victim Model=GCN, Perturbation Budget (∆)=22026.05 | 12.13 | 6 | |
| PR-BCD (NA)Attack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=12026.05 | 12.13 | 5.4 | |
| NETTACKAttack Type=Poison, Victim Model=ElasticGNN, Perturbation budget (Δ)=12026.05 | 12.8 | 7 | |
| GOttackAttack Type=Evasion, Victim Model=GCN, Perturbation Budget (∆)=12026.05 | 13.33 | 6 | |
| GOttackAttack Type=Poison, Victim Model=GCN, Perturbation Budget (∆)=32026.05 | 13.47 | 6 | |
| GOttackAttack Type=Evasion, Victim Model=GCN, Perturbation Budget (∆)=52026.05 | 13.6 | 6 | |
| L1D-RNDAttack Type=Evasion, Victim Model=GSAGE, Perturbation Budget (∆)=12026.05 | 13.6 | 4.8 | |
| GOttackAttack Type=Poison, Victim Model=GCN, Perturbation Budget (∆)=12026.05 | 13.6 | 6 | |
| GOttackAttack Type=Poison, Victim Model=GCN, Perturbation Budget (∆)=52026.05 | 13.6 | 6 | |
| SGAAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=12026.05 | 13.6 | 3.8 | |
| GOttackAttack Type=Evasion, Victim Model=GCN, Perturbation Budget (∆)=32026.05 | 14 | 6 | |
| GOttackAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=12026.05 | 14.93 | 4.6 | |
| 1D-RNDAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=32026.05 | 15.33 | 5.4 | |
| PR-BCD (NA)Attack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=22026.05 | 15.73 | 5.4 | |
| FGAAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=12026.05 | 15.87 | 3.2 | |
| PGDAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=22026.05 | 16 | 4.5 | |
| NETTACKAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=32026.05 | 16.53 | 6.4 | |
| 1D-RNDAttack Type=Poison, Victim Model=ElasticGNN, Perturbation budget (Δ)=12026.05 | 16.67 | 5.5 | |
| NETTACKAttack Type=Poison, Victim Model=ElasticGNN, Perturbation budget (Δ)=22026.05 | 16.8 | 7 | |
| SGAAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=22026.05 | 17.2 | 3.8 | |
| GOttackAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=22026.05 | 17.6 | 4.6 | |
| FGAAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=22026.05 | 17.87 | 3.2 | |
| PR-BCD (NA)Attack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=32026.05 | 18.13 | 5.4 | |
| 1D-RNDAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=42026.05 | 18.4 | 5.4 | |
| NETTACKAttack Type=Evasion, Victim Model=GNNGuard, Perturbation budget (Δ)=12026.05 | 18.8 | 5 | |
| NETTACKAttack Type=Evasion, Victim Model=GNNGuard, Perturbation budget (Δ)=22026.05 | 18.8 | 5 | |
| NETTACKAttack Type=Evasion, Victim Model=GNNGuard, Perturbation budget (Δ)=32026.05 | 18.8 | 5 | |
| NETTACKAttack Type=Evasion, Victim Model=GNNGuard, Perturbation budget (Δ)=42026.05 | 18.8 | 5 | |
| NETTACKAttack Type=Evasion, Victim Model=GNNGuard, Perturbation budget (Δ)=52026.05 | 18.8 | 5 | |
| NETTACKAttack Type=Poison, Victim Model=GNNGuard, Perturbation budget (Δ)=12026.05 | 18.8 | 5 | |
| PGDAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=12026.05 | 18.93 | 3.1 | |
| NETTACKAttack Type=Evasion, Victim Model=GSAGE, Perturbation Budget (∆)=12026.05 | 19.07 | 6.8 | |
| PR-BCD (NA)Attack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=42026.05 | 19.33 | 5.4 | |
| NETTACKAttack Type=Poison, Victim Model=ElasticGNN, Perturbation budget (Δ)=32026.05 | 19.33 | 7 | |
| PGDAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=32026.05 | 19.47 | 4.5 | |
| SGAAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=32026.05 | 19.73 | 3.8 | |
| 1D-RNDAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=52026.05 | 19.87 | 5.4 | |
| 1D-RNDAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=12026.05 | 20 | 1.3 | |
| PGDAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=42026.05 | 20 | 4.5 | |
| PR-BCD (NA)Attack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=52026.05 | 20.13 | 5.4 | |
| GOttackAttack Type=Poison, Victim Model=ElasticGNN, Perturbation budget (Δ)=12026.05 | 20.13 | 5.1 | |
| NETTACKAttack Type=Poison, Victim Model=GSAGE, Perturbation Budget (∆)=12026.05 | 20.27 | 7 | |
| NETTACKAttack Type=Evasion, Victim Model=GSAGE, Perturbation Budget (∆)=22026.05 | 20.4 | 6.8 | |
| NETTACKAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=42026.05 | 20.4 | 6.4 | |
| 1D-RNDAttack Type=Poison, Victim Model=ElasticGNN, Perturbation budget (Δ)=22026.05 | 21.07 | 5.5 | |
| PGDAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=52026.05 | 21.47 | 4.5 | |
| SGAAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=42026.05 | 21.47 | 3.8 | |
| NETTACKAttack Type=Evasion, Victim Model=GSAGE, Perturbation Budget (∆)=52026.05 | 21.6 | 6.8 | |
| NETTACKAttack Type=Evasion, Victim Model=GSAGE, Perturbation Budget (∆)=32026.05 | 21.73 | 6.8 | |
| PGDAttack Type=Poison, Victim Model=GCN-GARNET, Perturbation budget (Δ)=12026.05 | 21.87 | 4.1 | |
| FGAAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=32026.05 | 22.13 | 3.2 | |
| GOttackAttack Type=Evasion, Victim Model=GNNGuard, Perturbation budget (Δ)=12026.05 | 22.13 | 6.5 | |
| GOttackAttack Type=Evasion, Victim Model=GNNGuard, Perturbation budget (Δ)=22026.05 | 22.13 | 6.5 | |
| GOttackAttack Type=Evasion, Victim Model=GNNGuard, Perturbation budget (Δ)=32026.05 | 22.13 | 6.5 | |
| GOttackAttack Type=Evasion, Victim Model=GNNGuard, Perturbation budget (Δ)=42026.05 | 22.13 | 6.5 | |
| GOttackAttack Type=Evasion, Victim Model=GNNGuard, Perturbation budget (Δ)=52026.05 | 22.13 | 6.5 | |
| NETTACKAttack Type=Poison, Victim Model=ElasticGNN, Perturbation budget (Δ)=42026.05 | 22.13 | 7 | |
| GOttackAttack Type=Poison, Victim Model=GNNGuard, Perturbation budget (Δ)=12026.05 | 22.13 | 6.5 | |
| FGAAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=42026.05 | 22.27 | 3.2 | |
| NETTACKAttack Type=Evasion, Victim Model=ElasticGNN, Perturbation budget (Δ)=52026.05 | 22.8 | 6.4 | |
| NETTACKAttack Type=Poison, Victim Model=GSAGE, Perturbation Budget (∆)=22026.05 | 23.2 | 7 | |
| SGAAttack Type=Evasion, Victim Model=GCN-GARNET, Perturbation budget (Δ)=52026.05 | 23.2 | 3.8 |