Graph-Aware Stealthy Poison-Text Backdoors for Text-Attributed Graphs
Qi Luo, Minghui Xu, Dongxiao Yu, Xiuzhen Cheng

TL;DR
This paper introduces TAGBD, a stealthy backdoor attack on text-attributed graphs that manipulates node text to trigger mispredictions, demonstrating high success rates and transferability.
Contribution
The paper presents a novel graph-aware backdoor attack method that generates inconspicuous poison text, highlighting security vulnerabilities in text-attributed graph systems.
Findings
TAGBD achieves high attack success rates on benchmark datasets.
The attack transfers effectively across different graph models.
It remains effective under common defenses.
Abstract
Modern graph learning systems often combine links with text, as in citation networks with abstracts or social graphs with user posts. In such systems, text is usually easier to edit than graph structure, which creates a practical security risk: an attacker may hide a small malicious cue in training text and later use it to trigger incorrect predictions. This paper studies that risk in a realistic setting where the attacker edits only node text and leaves the graph unchanged. We propose \textbf{TAGBD}, a graph-aware backdoor attack that first selects training nodes that are easier to manipulate, then generates stealthy poison text with a shadow graph model, and finally injects the text by replacing the original content or appending a short phrase. Experiments on three benchmark datasets show that TAGBD achieves very high attack success rates, transfers across different graph models, and…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
