计算机工程与应用 ›› 2024, Vol. 60 ›› Issue (18): 285-293.DOI: 10.3778/j.issn.1002-8331.2306-0265

• 网络、通信与安全 • 上一篇    下一篇

引入度中心性选择攻击节点的对抗攻击算法

钱榕,徐雪飞,刘晓豫,张克君,曾俊铭,吕宗芳,郭竞桧   

  1. 1.北京电子科技学院 网络空间安全系,北京 100070
    2.西安电子科技大学 计算机科学与技术学院,西安 710071
    3.北京电子科技学院 管理系,北京 100070
  • 出版日期:2024-09-15 发布日期:2024-09-13

Adversarial Attack Algorithm for Introducing Degree Centrality Selection of Attack Nodes

QIAN Rong, XU Xuefei, LIU Xiaoyu, ZHANG Kejun, ZENG Junming, LYU Zongfang, GUO Jinghui   

  1. 1.Department of Cyberspace Security, Beijing Electronic Science and Technology Institute, Beijing 100070, China
    2.College of Computer Science and Technology, Xidian University, Xi’an 710071, China
    3.Department of Management, Beijing Electronic Science and Technology Institute, Beijing 100070, China
  • Online:2024-09-15 Published:2024-09-13

摘要: 图卷积网络(GCN)在图神经网络中应用广泛,在处理图结构数据方面发挥着重要作用。然而,最近的研究表明,GCN容易受到中毒攻击等恶意攻击。在针对GCN的所有可能的对抗性攻击中,有一种特殊的方法是针对图卷积网络的目标通用攻击TUA(target universal attack)。该方法在挑选攻击节点时为了简便采用随机选择策略,该策略忽略了节点邻居对节点的重要性,对攻击成功率有负面影响。针对这个问题,提出了一种基于度中心性的攻击节点选择策略的对抗攻击算法(adversarial attack algorithm based on degree centrality attack node selection strategy,DCANSS)。优化挑选攻击节点的方式,引入度中心性,得到攻击节点。注入假节点并与攻击节点连接。挑选辅助节点并应用图卷积网络的消息传递机制,使节点信息扩散,计算扰动并将扰动特征赋予假节点,完成攻击,达到误分类目标。在三个流行的数据集上的实验表明,当仅使用3个攻击节点和2个假节点时,所提出的攻击对图中任意受害节点的平均攻击成功率达到90%。将DCANSS算法与TUA算法以及其他建立的基线算法进行实验对比,进一步验证了DCANSS算法的攻击能力。

关键词: 度中心性, 目标通用攻击(TUA), 基于度中心性的攻击节点选择策略(DCANSS), 图对抗攻击算法, 图神经网络

Abstract: Graph convolutional networks (GCN) are widely used in graph neural networks and play an important role in processing graph structured data. However, recent studies have shown that GCN is vulnerable to malicious attacks such as poisoning attacks. Of all the possible adversarial attacks against GCN, one particular approach is the TUA(target universal attack) against graph convolutional networks. In order to select attack nodes simply, the method adopts random selection strategy, which ignores the importance of neighbor to node, and has a negative impact on the success rate of attack. In response to this problem, adversarial attack algorithm based on degree centrality attack node selection strategy, adversarial attack algorithm based on degree centrality attack node selection strategy (DCANSS). Firstly, the method of selecting attack nodes is optimized, and the degree centrality is introduced to get the attack nodes. Secondly, the fake node is injected and connected to the attack node. Then, the auxiliary node is selected and the message passing mechanism of the graph convolutional network is applied to spread the node information, calculate the disturbance and assign the disturbance feature to the false node to complete the attack and achieve the misclassification goal. Experiments on three popular datasets show that when only three attack nodes and six fake nodes are used, the proposed attack has an average success rate of 90% against any victim node in the graph. By comparing DCANSS algorithm with TUA algorithm and other established baseline algorithms, the attack capability of DCANSS algorithm is further verified.

Key words: degree centrality, target universal attack (TUA), degree centrality attack node selection strategy (DCANSS), graph adversarial attack algorithm, graph neural network