论文标题
Viennet:忽略奇怪的邻居可以提高图形神经网络的鲁棒性
EvenNet: Ignoring Odd-Hop Neighbors Improves Robustness of Graph Neural Networks
论文作者
论文摘要
图形神经网络(GNN)因其在图形机学习中的有希望的表现而受到广泛的研究关注。尽管具有非凡的预测精度,但面对测试图的同质变化,现有的方法(例如GCN和GPRGNN)并不强大,这使这些模型易受图形结构攻击的影响,并且具有有限的能力,可以推广到多样化级别的同层级别的图表。尽管已经提出了许多方法来改善GNN模型的鲁棒性,但这些技术中的大多数仅限于空间域并采用复杂的防御机制,例如学习新的图形结构或计算边缘的注意力。在本文中,我们研究了在光谱域中设计简单且强大的GNN模型的问题。我们提出了与均匀的图形滤波器相对应的光谱GNN。基于我们在空间和光谱域中的理论分析,我们证明了均匀的均匀模型在跨同粒细胞和异质图上概括的全阶模型,这意味着忽略了奇怪的邻居可以提高GNN的鲁棒性。我们对合成数据集和现实世界数据集进行了实验,以证明均匀的均匀性。值得注意的是,VistNet在不引入额外的计算成本的情况下优于现有的防御模型,并在传统的均电和异性图上保持竞争力。
Graph Neural Networks (GNNs) have received extensive research attention for their promising performance in graph machine learning. Despite their extraordinary predictive accuracy, existing approaches, such as GCN and GPRGNN, are not robust in the face of homophily changes on test graphs, rendering these models vulnerable to graph structural attacks and with limited capacity in generalizing to graphs of varied homophily levels. Although many methods have been proposed to improve the robustness of GNN models, most of these techniques are restricted to the spatial domain and employ complicated defense mechanisms, such as learning new graph structures or calculating edge attentions. In this paper, we study the problem of designing simple and robust GNN models in the spectral domain. We propose EvenNet, a spectral GNN corresponding to an even-polynomial graph filter. Based on our theoretical analysis in both spatial and spectral domains, we demonstrate that EvenNet outperforms full-order models in generalizing across homophilic and heterophilic graphs, implying that ignoring odd-hop neighbors improves the robustness of GNNs. We conduct experiments on both synthetic and real-world datasets to demonstrate the effectiveness of EvenNet. Notably, EvenNet outperforms existing defense models against structural attacks without introducing additional computational costs and maintains competitiveness in traditional node classification tasks on homophilic and heterophilic graphs.