Overview

Adversarial attacks study how deliberately chosen inputs, training data, model parameters, or system interactions can make AI systems fail or behave as intended by an attacker. Common approaches include gradient-based perturbations, black-box query and evolutionary search, generative or semantic changes, physical patches and sensor interference, and poisoning or backdoors. Work spans image, language, audio, graph, and time-series models as well as federated learning, recommenders, robotics, and AI agents, with evaluations on benchmarks and increasingly realistic deployment settings. A central tension is that attacks must be effective and stealthy under practical constraints, while defenses and benchmarks must keep pace with adaptive threats and distinguish digital robustness from real-world resilience.

Latest papers

451 papers54 papers in the last four weeks, up 69% on the four weeks before. 0.3% of all new papers.

Jun 3, 2023

Harnessing Trust in Directed Graphs: Redefining Robustness of Graph Learning

Existing research on robust Graph Neural Networks (GNNs) focuses predominantly on undirected graphs, overlooking the trustworthiness inherent in the link directions of directed graphs. In this work, we analyze the limitations of current approaches from both the attack and defense perspectives and redefine the robustness of GNNs in directed graphs. From the attack side, we introduce a more realistic directed graph attack setting that addresses the shortcomings of existing attacks. From the defense side, we propose a simple yet effective message-passing framework that serves as a plug-in layer to strengthen GNN robustness while avoiding a false sense of robustness. Our findings show that the trust signals encoded in directed graphs can be harnessed to substantially improve the robustness of GNNs. When combined with existing defense strategies, the framework achieves state-of-the-art robust performance alongside strong clean accuracy against both transfer and adaptive attacks. These results point to a novel and promising direction for strengthening the robustness of graph deep learning.