Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective
Chang Liu, Hai Huang, Yujie Xing, and Xingquan Zuo

TL;DR
This paper introduces QUGIA, a novel query-based graph injection attack that is unnoticeable and does not rely on surrogate models, significantly improving attack effectiveness and stealthiness against GNNs.
Contribution
QUGIA is the first attack to combine query-based node injection with a Bayesian feature generation framework, enhancing attack success and unnoticeability without surrogate models.
Findings
QUGIA outperforms existing attacks on six real-world datasets.
QUGIA achieves higher attack success rates while remaining unnoticeable.
The method generalizes well across diverse graph structures.
Abstract
The robustness of Graph Neural Networks (GNNs) has become an increasingly important topic due to their expanding range of applications. Various attack methods have been proposed to explore the vulnerabilities of GNNs, ranging from Graph Modification Attacks (GMA) to the more practical and flexible Graph Injection Attacks (GIA). However, existing methods face two key challenges: (i) their reliance on surrogate models, which often leads to reduced attack effectiveness due to structural differences and prior biases, and (ii) existing GIA methods often sacrifice attack success rates in undefended settings to bypass certain defense models, thereby limiting their overall effectiveness. To overcome these limitations, we propose QUGIA, a Query-based and Unnoticeable Graph Injection Attack. QUGIA injects nodes by first selecting edges based on victim node connections and then generating node…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdvanced Graph Neural Networks · Internet Traffic Analysis and Secure E-voting · Spam and Phishing Detection
