Abstract
Graph embedding method learns the low-dimensional representation of graph data, which facilitates downstream graph analysis tasks, such as node classification, graph classification, link prediction and community detection. With the in-depth study of graph analysis tasks, the issues of excessive data mining by graph embedding methods have become increasingly prominent, a number of graph embedding attack methods have been put forward. Inspired by promising performance of generative adversarial network, this paper proposes an adaptive graph adversarial attack framework based on generative adversarial network (AGA-GAN). We use the game between a generator and two discriminators with different functions to iteratively generate the adversarial graph. Specifically, AGA-GAN generates the adversarial subgraph according to different attack strategies to rewire the corresponding parts in the original graph, and finally form the whole adversarial graph. To address the scalability problem of existing graph embedding attack methods, we consider the adaptively selected K-hop neighbor subgraph as the attack target instead of the original graph. Experimental study on real graph datasets verifies that the AGA-GAN can achieve state-of-the-art attack performance in most node classifications.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Cai, H., Zheng, V.W., Chang, K.: A comprehensive survey of graph embedding: problems, techniques and applications. IEEE Trans. Knowl. Data Eng. 30(9), 1616–1637 (2018)
Wang, Q., Mao, Z., Wang, B., Guo, L.: Knowledge graph embedding: a survey of approaches and applications. IEEE Trans. Knowl. Data Eng. 29(12), 2724–2743 (2017)
Choi, E., Bahadori, M.T. Song, L., Stewart, W.F., Sun, J.: Gram: graph-based attention model for healthcare representation learning. In: The ACM SIGKDD International Conference, pp. 787–795 (2017)
Tang, J., Qu, M., Mei, Q.: Pte: predictive text embedding through large-scale heterogeneous text networks, pp. 1165–1174 (2015)
Wang, S., Tang, J., Aggarwal, C., Liu, H.: Linked document embedding for classification. In: Proceedings of the 25th ACM international on conference on information and knowledge management pp. 115–124 (2016)
Ying R., et al. Hierarchical graph representation learning with differentiable pooling. In: Advances in Neural Information Processing Systems, pp. 4800–4810 (2018)
Gibert, D., Mateu, C., Planes, J.: An end-to-end deep learning architecture for classification of malware’s binary content. In: Kůrková, V., Manolopoulos, Y., Hammer, B., Iliadis, L., Maglogiannis, Ilias (eds.) ICANN 2018. LNCS, vol. 11141, pp. 383–391. Springer, Cham (2018). https://doi.org/10.1007/978-3-030-01424-7_38
Wang, S., Tang, J. Aggarwal, C. Chang, Y. Liu, H.: Signed network embedding in social media. In: SDM, pp. 327–335 (2017)
Tian, F., Gao, B., Cui, Q., Chen, E., Liu, T.Y.: Learning deep representations for graph clustering. In: Twenty-Eighth AAAI Conference on Artificial Intelligence, pp. 1293–1299 (2014)
Allab, K., Labiod, L., Nadif, M.: A semi-nmf-pca unified framework for data clustering. IEEE Trans. Knowl. Data Eng. 29(1), 2–16 (2017)
Liu, L., Cheung, W.K., Li, X., Liao, L.: Aligning users across social networks using network embedding. In IJCAI, pp. 1774–1780 (2016)
Kipf, T.N., Welling, M.: Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907 (2016)
Masashi, T., Kentaro, T., Jun, S.: Compound-protein Interaction Prediction with End-to-end learning of neural networks for graphs and sequences. Bioinformatics 35(2), 309–318 (2018)
Perozzi, B., Al-Rfou, R., Skiena, S.: Deepwalk: online learning of social representations. In: ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 701–710 (2014)
Grover, A., Leskovec, J.: node2vec: Scalable feature learning for networks. In: SIGKDD, pp. 855–864 (2016)
Newman, M.E.J.: Fast algorithm for detecting community structure in networks. Phys. Rev. E, Stat. Phys. Plasmas Fluids Relat. Interdiscip. Top 69(6), 066133 (2004)
Blondel, V.D., Guillaume, J.-L., Lambiotte, R., Lefebvre, E.: Fast unfolding of communities in large networks. J. Stat. Mech., Theory Exp. 2008(10), 10008 (2008)
Zügner, D., Akbarnejad, A., Günnemann, S.: Adversarial attacks on neural networks for graph data. In: Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining, KDD 2018, London, UK, 19–23 August 2018, pp. 2847–2856 (2018)
Chen J, Wu Y, Xu X, et al. Fast Gradient Attack on Network Embedding (2018)
Chang H., et al. A restricted black-box adversarial framework towards attacking graph embedding models. (2019)
Zügner, D., Günnemann, S.: Adversarial attacks on graph neural networks via meta learning (2019)
Chen, J., et al.: GA based Q-attack on community detection. IEEE Transactions on Computational Social Systems 6(3), 491–503 (2018)
Chen J, Chen Y, Chen L, et al.: Multiscale evolutionary perturbation attack on community detection 2019
Milani Fard, A., Wang, K.: Neighborhood randomization for link privacy in social network analysis. World Wide Web 18(1), 9–32 (2013). https://doi.org/10.1007/s11280-013-0240-6
Chen J, Shi Z, Wu Y, et al. Link Prediction Adversarial Attack (2018)
Goodfellow, I.J, Pouget-Aabadie, J., Mirza, M., et al.: Generative adversarial networks. In: Proceedings of International Conference on Neural Information Processing Systems Kuching:, pp. 2672–2680 (2014)
Mangla, P., Jandial, S., Varshney, S., et al. AdvGAN ++: Harnessing latent layers for adversary generation. In: Proceedings of the IEEE International Conference on Computer Vision Workshops 2019
Zhu, Z.A., Lu Y.Z., Chiang C.K.: Generating adversarial examples by makeup attacks on face recognition. In: 2019 IEEE International Conference on Image Processing (ICIP). IEEE (2019)
Wang, H., Wang, J., Wang, J., et al. GraphGAN: Graph representation learning with generative adversarial nets. IEEE Trans. Knowl. Data Eng. (2017)
Bojchevski, A., Shchur, O., Zügner, D., et al.: NetGAN: generating graphs via random walks (2018)
Pan, S., Hu, R., Long, G., et al.: Adversarially regularized graph autoencoder for graph embedding (2018)
Razavi, M.N., Iverson, L.: Improving personal privacy in social systems with people-tagging. In: Proceedings of the 2009 International ACM SIGGROUP Conference on Supporting Group Work, GROUP 2009, Sanibel Island, Florida, USA, May 10–13, 2009. ACM (2009)
Garcia, J.O., Ashourvan, A., Muldoon, S.F., et al.: Applications of community detection techniques to brain graphs: algorithmic considerations and implications for neural function. Proc. IEEE 106, 1–22 (2018)
Nagaraja, S.: The Impact of Unlinkability on Adversarial Community Detection: Effects and Countermeasures Privacy Enhancing Technologies. Springer, Berlin Heidelberg (2010)
Lucic, M., Kurach, K., Michalski, M., Gelly, S., Bousquet, O.: Are gans created equal? a large-scale study. In: Advances in Neural Information Processing Systems, pp. 700–709 (2018)
Waniek, M., Michalak, T., Rahwan, T.: et al. Hiding Individuals and Communities in a Social Network. Nat. Hum. Behav. (2016)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2020 Springer Nature Singapore Pte Ltd.
About this paper
Cite this paper
Chen, J., Zhang, D., Lin, X. (2020). Adaptive Adversarial Attack on Graph Embedding via GAN. In: Xiang, Y., Liu, Z., Li, J. (eds) Security and Privacy in Social Networks and Big Data. SocialSec 2020. Communications in Computer and Information Science, vol 1298. Springer, Singapore. https://doi.org/10.1007/978-981-15-9031-3_7
Download citation
DOI: https://doi.org/10.1007/978-981-15-9031-3_7
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-15-9030-6
Online ISBN: 978-981-15-9031-3
eBook Packages: Computer ScienceComputer Science (R0)