Graph Structure Adversarial Attack Design Based on Graph Attention Networks

Graph Neural Networks (GNNs) have been demonstrated to be effective as node classifiers under ideal conditions. However, minor perturbations in the graph may significantly affect the classification performance of GNNs. Therefore, it is imperative to investigate potential attack methods against GNNs, so that more robust networks or effective defense models could be developed. In this paper, a novel inconspicuous adversarial attack model, termed Graph Attention Adversarial Attacks (GATTACK), is proposed. GATTACK leverages Graph Attention Networks (GATs) to acquire the surrogate model, employs structure attacks targeted at specific nodes with constraints to ensure imperceptible perturbations, and takes full advantage of GAT's sensitivity to the topology of graphs. The efficiency of GATTACK is validated through comparative experiments, highlighting its performance and utility.