Data Poisoning Attack against Knowledge Graph Embedding
Not on the map. Why?
Abstract (arXiv)
Knowledge graph embedding (KGE) is a technique for learning continuous embeddings for entities and relations in the knowledge graph.Due to its benefit to a variety of downstream tasks such as knowledge graph completion, question answering and recommendation, KGE has gained significant attention recently. Despite its effectiveness in a benign environment, KGE' robustness to adversarial attacks is not well-studied. Existing attack methods on graph data cannot be directly applied to attack the embeddings of knowledge graph due to its heterogeneity. To fill this gap, we propose a collection of data poisoning attack strategies, which can effectively manipulate the plausibility of arbitrary targeted facts in a knowledge graph by adding or deleting facts on the graph. The effectiveness and efficiency of the proposed attack strategies are verified by extensive evaluations on two widely-used benchmarks.
Key facts. Cited by 36 papers in the map (data through 14 Oct 2026). First posted on arXiv 26 Apr 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 4; 2022: 4; 2023: 6; 2024: 11; 2025: 7; 2026: 4.
36 papers.
Sort:
By area:
- 2022A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainabilitycited by 118
- 2022Unsupervised Graph Poisoning Attack via Contrastive Loss Back-propagationcited by 25
- 2025GraphRAG under Firecited by 24
- 2022A Survey of Trustworthy Graph Learning: Reliability, Explainability, and Privacy Protectioncited by 20
- 2021Adversarial Attacks on Knowledge Graph Embeddings via Instance Attribution Methodscited by 16
- 2021Universal Spectral Adversarial Attacks for Deformable Shapescited by 14
- 2021Poisoning Knowledge Graph Embeddings via Relation Inference Patternscited by 12
- 2023Analysis of Label-Flip Poisoning Attack on Machine Learning Based Malware Detectorcited by 11
- 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustnesscited by 9
- 2021Task and Model Agnostic Adversarial Attack on Graph Neural Networkscited by 5
- 2023On the Security Risks of Knowledge Graph Reasoningcited by 5
- 2023Gold: A Global and Local-aware Denoising Framework for Commonsense Knowledge Graph Noise Detectioncited by 4
24 more
- 2022Random Walks for Adversarial Meshescited by 3
- 2024Fake Resume Attacks: Data Poisoning on Online Job Platformscited by 3
- 2024Untargeted Adversarial Attack on Knowledge Graph Embeddingscited by 3
- 2025Watermarking Graph Neural Networks via Explanations for Ownership Protectioncited by 3
- 2025RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generationcited by 3
- 2024TWIG: Towards pre-hoc Hyperparameter Optimisation and Cross-Graph Generalisation via Simulated KGE Modelscited by 2
- 2024A Cognac Shot To Forget Bad Memories: Corrective Unlearning for Graph Neural Networkscited by 2
- 2024eXpath: Explaining Knowledge Graph Link Prediction with Ontological Closed Path Rulescited by 2
- 2026Making Theft Useless: Adulteration-Based Protection of Proprietary Knowledge Graphs in GraphRAG Systemscited by 2
- 2024KG4RecEval: Does Knowledge Graph Really Matter for Recommender Systems?cited by 1
- 2024Resilience in Knowledge Graph Embeddingscited by 1
- 2025KGMark: A Diffusion Watermark for Knowledge Graphscited by 1
- 2025Unifying Post-hoc Explanations of Knowledge Graph Completionscited by 1
- 2026ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflictscited by 1
- 2026Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoningcited by 1
- 2023Taxonomy of AISecOps Threat Modeling for Cloud Based Medical Chatbotscited by 0
- 2023Poisoning × Evasion: Symbiotic Adversarial Robustness for Graph Neural Networkscited by 0
- 2024From Latent to Lucid: Transforming Knowledge Graph Embeddings into Interpretable Structures with KGEPrismacited by 0
- 2024Performance Evaluation of Knowledge Graph Embedding Approaches under Non-adversarial Attackscited by 0
- 2024Explaining Graph Neural Networks for Node Similarity on Graphscited by 0
- 2024Extending TWIG: Zero-Shot Predictive Hyperparameter Selection for KGEs based on Graph Structurecited by 0
- 2025GRainsaCK: a Comprehensive Software Library for Benchmarking Explanations of Link Prediction Tasks on Knowledge Graphscited by 0
- 2025LLMAtKGE: Large Language Models as Explainable Attackers against Knowledge Graph Embeddingscited by 0
- 2026Structural Adversarial Attacks on Relational Deep Learning under Integrity Constraintscited by 0
- 2026Structural Adversarial Attacks on Relational Deep Learning under Integrity Constraints8 Jul 2026
- 2026Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning10 May 2026
- 2026ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts9 May 2026
- 2026Making Theft Useless: Adulteration-Based Protection of Proprietary Knowledge Graphs in GraphRAG Systems1 Jan 2026
- 2025LLMAtKGE: Large Language Models as Explainable Attackers against Knowledge Graph Embeddings13 Oct 2025
- 2025GRainsaCK: a Comprehensive Software Library for Benchmarking Explanations of Link Prediction Tasks on Knowledge Graphs12 Aug 2025
- 2025Unifying Post-hoc Explanations of Knowledge Graph Completions29 Jul 2025
- 2025RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation9 Jul 2025
- 2025KGMark: A Diffusion Watermark for Knowledge Graphs29 May 2025
- 2025GraphRAG under Fire23 Jan 2025
- 2025Watermarking Graph Neural Networks via Explanations for Ownership Protection9 Jan 2025
- 2024Extending TWIG: Zero-Shot Predictive Hyperparameter Selection for KGEs based on Graph Structure19 Dec 2024
24 more
- 2024eXpath: Explaining Knowledge Graph Link Prediction with Ontological Closed Path Rules6 Dec 2024
- 2024A Cognac Shot To Forget Bad Memories: Corrective Unlearning for Graph Neural Networks1 Dec 2024
- 2024Resilience in Knowledge Graph Embeddings28 Oct 2024
- 2024Explaining Graph Neural Networks for Node Similarity on Graphs10 Jul 2024
- 2024Performance Evaluation of Knowledge Graph Embedding Approaches under Non-adversarial Attacks9 Jul 2024
- 2024From Latent to Lucid: Transforming Knowledge Graph Embeddings into Interpretable Structures with KGEPrisma3 Jun 2024
- 2024Untargeted Adversarial Attack on Knowledge Graph Embeddings8 May 2024
- 2024KG4RecEval: Does Knowledge Graph Really Matter for Recommender Systems?4 Apr 2024
- 2024Fake Resume Attacks: Data Poisoning on Online Job Platforms21 Feb 2024
- 2024TWIG: Towards pre-hoc Hyperparameter Optimisation and Cross-Graph Generalisation via Simulated KGE Models8 Feb 2024
- 2023Poisoning × Evasion: Symbiotic Adversarial Robustness for Graph Neural Networks9 Dec 2023
- 2023Gold: A Global and Local-aware Denoising Framework for Commonsense Knowledge Graph Noise Detection18 Oct 2023
- 2023Taxonomy of AISecOps Threat Modeling for Cloud Based Medical Chatbots18 May 2023
- 2023On the Security Risks of Knowledge Graph Reasoning3 May 2023
- 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness17 Mar 2023
- 2023Analysis of Label-Flip Poisoning Attack on Machine Learning Based Malware Detector3 Jan 2023
- 2022A Survey of Trustworthy Graph Learning: Reliability, Explainability, and Privacy Protection20 May 2022
- 2022A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability18 Apr 2022
- 2022Random Walks for Adversarial Meshes15 Feb 2022
- 2022Unsupervised Graph Poisoning Attack via Contrastive Loss Back-propagation20 Jan 2022
- 2021Task and Model Agnostic Adversarial Attack on Graph Neural Networks25 Dec 2021
- 2021Poisoning Knowledge Graph Embeddings via Relation Inference Patterns11 Nov 2021
- 2021Adversarial Attacks on Knowledge Graph Embeddings via Instance Attribution Methods4 Nov 2021
- 2021Universal Spectral Adversarial Attacks for Deformable Shapes7 Apr 2021
- 2021Adversarial Attacks on Knowledge Graph Embeddings via Instance Attribution Methodscited by 16
- 2021Poisoning Knowledge Graph Embeddings via Relation Inference Patternscited by 12
- 2023Analysis of Label-Flip Poisoning Attack on Machine Learning Based Malware Detectorcited by 11
- 2024Fake Resume Attacks: Data Poisoning on Online Job Platformscited by 3
- 2025KGMark: A Diffusion Watermark for Knowledge Graphscited by 1
- 2025KGMark: A Diffusion Watermark for Knowledge Graphs29 May 2025
- 2024Fake Resume Attacks: Data Poisoning on Online Job Platforms21 Feb 2024
- 2023Analysis of Label-Flip Poisoning Attack on Machine Learning Based Malware Detector3 Jan 2023
- 2021Poisoning Knowledge Graph Embeddings via Relation Inference Patterns11 Nov 2021
- 2021Adversarial Attacks on Knowledge Graph Embeddings via Instance Attribution Methods4 Nov 2021
- 2022A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainabilitycited by 118
- 2022Unsupervised Graph Poisoning Attack via Contrastive Loss Back-propagationcited by 25
- 2022A Survey of Trustworthy Graph Learning: Reliability, Explainability, and Privacy Protectioncited by 20
- 2021Universal Spectral Adversarial Attacks for Deformable Shapescited by 14
- 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustnesscited by 9
- 2021Task and Model Agnostic Adversarial Attack on Graph Neural Networkscited by 5
- 2023On the Security Risks of Knowledge Graph Reasoningcited by 5
- 2022Random Walks for Adversarial Meshescited by 3
- 2024Untargeted Adversarial Attack on Knowledge Graph Embeddingscited by 3
- 2025Watermarking Graph Neural Networks via Explanations for Ownership Protectioncited by 3
- 2024TWIG: Towards pre-hoc Hyperparameter Optimisation and Cross-Graph Generalisation via Simulated KGE Modelscited by 2
- 2024A Cognac Shot To Forget Bad Memories: Corrective Unlearning for Graph Neural Networkscited by 2
12 most cited of 25 All 25 (JSON)
- 2026Structural Adversarial Attacks on Relational Deep Learning under Integrity Constraints8 Jul 2026
- 2025LLMAtKGE: Large Language Models as Explainable Attackers against Knowledge Graph Embeddings13 Oct 2025
- 2025GRainsaCK: a Comprehensive Software Library for Benchmarking Explanations of Link Prediction Tasks on Knowledge Graphs12 Aug 2025
- 2025Unifying Post-hoc Explanations of Knowledge Graph Completions29 Jul 2025
- 2025Watermarking Graph Neural Networks via Explanations for Ownership Protection9 Jan 2025
- 2024Extending TWIG: Zero-Shot Predictive Hyperparameter Selection for KGEs based on Graph Structure19 Dec 2024
- 2024eXpath: Explaining Knowledge Graph Link Prediction with Ontological Closed Path Rules6 Dec 2024
- 2024A Cognac Shot To Forget Bad Memories: Corrective Unlearning for Graph Neural Networks1 Dec 2024
- 2024Resilience in Knowledge Graph Embeddings28 Oct 2024
- 2024Explaining Graph Neural Networks for Node Similarity on Graphs10 Jul 2024
- 2024Performance Evaluation of Knowledge Graph Embedding Approaches under Non-adversarial Attacks9 Jul 2024
- 2024From Latent to Lucid: Transforming Knowledge Graph Embeddings into Interpretable Structures with KGEPrisma3 Jun 2024
12 newest of 25 All 25 (JSON)