A Graph Neural Network for Structure-Feature Collaborative Defense
[1]HAN Jihui,SHI Yupeng,HUANG Ziqi,et al.A Graph Neural Network for Structure-Feature Collaborative Defense[J].Journal of Zhengzhou University (Engineering Science),2026,47(4):134-142.[doi:10.13705/j.issn.1671-6833.2026.04.010]
Copy
Journal of Zhengzhou University (Engineering Science)[ISSN
1671-6833/CN
41-1339/T] Volume:
47
Number of periods:
2026 Issue 4
Page number:
134-142
Column:
Public date:
2026-07-10
- Title:
- A Graph Neural Network for Structure-Feature Collaborative Defense
- Keywords:
- graph neural networks; robustness; structure perturbation; feature perturbation; sparse attention
- CLC:
- TP18TN929. 5
- Abstract:
- To address the degradation of node representations in graph neural networks with complex perturbation environments, a structure‑feature collaborative defense graph neural network named SFCoRobustGNN was proposed. Structurally, a sparse attention mechanism that integrated structure priors to dynamically suppress anomalous edges was introduced. Feature‑wise, a channel gating mechanism was combined with a nonlinear feature mixing module (FeatureMixPro) to enhance the model’s adaptability to feature perturbations. A collaborative dual‑pathway defense was achieved through adversarial training and a multi‑objective optimization strategy. Experiments on multiple benchmark datasets, including Cora and Citeseer, demonstrated that the proposed method outperformed most mainstream baseline methods with various intensities of structure perturbations (5%‑40%) and feature attacks (\varepsilon = 0.01‑0.10), showing significant improvement in node classification accuracy. On the large‑scale ogbn‑products dataset, it maintained an accuracy of 71.82% even with a 20% MetaAttack structure perturbation, demonstrating its strong scalability. Ablation studies validated the effectiveness and synergistic effects of each module. The proposed method effectively mitigated performance degradation with complex perturbations and exhibited excellent generalization.
- References:
-
[1] Zügner D, Akbarnejad A, Günnemann S. Adversarial attacks on neural networks for graph data[C]//Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining. New York: ACM, 2018: 2847‑2856.
[2] Zhu Yanqiao, Yu Yichen, Yu Feng, et al. Deep graph contrastive representation learning[PP/OL]. V2. arXiv (2020‑07‑13)[2026‑04‑10]. https://arxiv.org/abs/2006.04131.
[3] Battaglia P W, Hamrick J B, Bapst V, et al. Relational inductive biases, deep learning, and graph networks[PP/OL]. V3. arXiv (2018‑10‑17)[2026‑04‑10]. https://arxiv.org/abs/1806.01261.
[4] Zhang Xiang, Zitnik M. GNNGuard: defending graph neural networks against adversarial attacks[PP/OL]. V3. arXiv(2020‑10‑28)[2026‑04‑10]. https://arxiv.org/abs/2006.08149.
[5] Chen Ting, Kornblith S, Norouzi M, et al. A simple framework for contrastive learning of visual representations[PP/OL]. V3. arXiv(2020‑07‑01)[2026‑04‑10]. https://arxiv.org/abs/2002.05709.
[6] Jin Wei, Ma Yao, Liu Xiaorui, et al. Graph structure learning for robust graph neural networks[C]//Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining. New York: ACM, 2020: 66‑74.
[7] Li Gege, Ye Zhonglin, Cao Shujuan, et al. An unsupervised link prediction algorithm based on an approximate graph neural network framework[J]. Journal of Zhengzhou University (Engineering Science), 2024, 45(6): 75‑82.［李格格, 冶忠林, 曹淑娟, 等. 一种近似图神经网络框架的无监督链路预测算法［J］. 郑州大学学报(工学版), 2024, 45(6): 75‑82.］
[8] Veličković P, Fedus W, Hamilton W L, et al. Deep graph infomax[PP/OL]. V2. arXiv (2018‑12‑21)[2026‑04‑10]. https://arxiv.org/abs/1809.10341.
[9] Kamhoua B F, Zhang Lin, Ma Kaili, et al. GRACE: A general graph convolutional framework for attributed graph clustering[J]. ACM Transactions on Knowledge Discovery from Data, 2023, 17(3): 1‑31.
[10] Zhu Yanqiao, Yu Yichen, Yu Feng, et al. Graph contrastive learning with adaptive augmentation[C]//Proceedings of the Web Conference 2021. New York: ACM, 2021: 2069‑2080.
[11] Thakoor S, Tallec C, Azar M G, et al. Large‑scale representation learning on graphs via bootstrapping[PP/OL]. V3. arXiv (2023‑02‑20)[2026‑04‑10]. https://doi.org/10.48550/arXiv.2102.06514.
[12] Liu Xiaorui, Jin Wei, Ma Yao, et al. Elastic graph neural networks[PP/OL]. V1. arXiv (2021‑07‑05)[2026‑04‑10]. https://arxiv.org/abs/2107.06996.
[13] Li Kuan, Liu Yang, Ao Xiang, et al. Reliable representations make a stronger defender: unsupervised structure refinement for robust GNN[C]//Proceedings of the 28th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining. New York: ACM, 2022: 925‑935.
[14] Veličković P, Cucurull G, Casanova A, et al. Graph attention networks[PP/OL]. V2. arXiv (2018‑02‑04)[2026‑04‑10]. https://arxiv.org/abs/1710.10903.
[15] Egressy B, Von Niederhäusern L, Blanuša J, et al. Provably powerful graph neural networks for directed multigraphs[J]. Proceedings of the AAAI Conference on Artificial Intelligence, 2024, 38(10): 11838‑11846.
[16] Ahmed N, Rossi R A, Zhou Rong. Cora [DS/OL]. [2026‑04‑10]. http://networkrepository.com/cora/cora.php.
[17] Ahmed N, Rossi R A, Zhou Rong. Citeseer [DS/OL]. [2026‑04‑10]. http://networkrepository.com/citeseer.php.
[18] Adamic L, Glance N. Polblogs [DS/OL]. [2026‑04‑10]. http://networkrepository.com/polblogs.php.
[19] Namata G M, London B, Getoor L, et al. PubMed diabetes dataset[DS/OL]. [2026‑04‑10]. https://linqs.org/datasets/#pubmed‑diabetes.
[20] Hu Weihua, Fey M, Zitnik M, et al. Dataset ogbn‑products[DS/OL]. Open Graph Benchmark [2026‑04‑10]. https://ogb.stanford.edu/docs/nodeprop/#ogbn‑products.
[21] Zügner D, Borchert O, Akbarnejad A, et al. Adversarial attacks on graph neural networks: perturbations and their patterns[J]. ACM Transactions on Knowledge Discovery from Data, 2020, 14(5): 1‑31.
[22] Waniek M, Michalak T P, Wooldridge M J, et al. Hiding individuals and communities in a social network[J]. Nature Human Behaviour, 2018, 2(2): 139‑147.
[23] Madry A, Makelov A, Schmidt L, et al. Towards deep learning models resistant to adversarial attacks[PP/OL]. V4. arXiv (2019‑09‑04)[2026‑04‑10]. https://doi.org/10.48550/arXiv.1706.06083.
[24] Goodfellow I J, Shlens J, Szegedy C. Explaining and harnessing adversarial examples[PP/OL]. V3. arXiv (2015‑03‑20)[2026‑04‑10]. https://arxiv.org/abs/1412.6572.
[25] Kipf T N, Welling M. Semi‑supervised classification with graph convolutional networks[PP/OL]. V4. arXiv (2017‑02‑22)[2026‑04‑10]. https://arxiv.org/abs/1609.02907.
[26] Zhu Dingyuan, Zhang Ziwei, Cui Peng, et al. Robust graph convolutional networks against adversarial attacks[C]//Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining. New York: ACM, 2019: 1399‑1407.
- Similar References:
Memo
-
Last Update:
2026-09-22
