Graph Robustness Benchmark: Benchmarking the Adversarial Robustness of Graph Machine Learning
Not on the map. Why?
Abstract (arXiv)
Adversarial attacks on graphs have posed a major threat to the robustness of graph machine learning (GML) models. Naturally, there is an ever-escalating arms race between attackers and defenders. However, the strategies behind both sides are often not fairly compared under the same and realistic conditions. To bridge this gap, we present the Graph Robustness Benchmark (GRB) with the goal of providing a scalable, unified, modular, and reproducible evaluation for the adversarial robustness of GML models. GRB standardizes the process of attacks and defenses by 1) developing scalable and diverse datasets, 2) modularizing the attack and defense implementations, and 3) unifying the evaluation protocol in refined scenarios. By leveraging the GRB pipeline, the end-users can focus on the development of robust GML models with automated data processing and experimental evaluations. To support open and reproducible research on graph adversarial learning, GRB also hosts public leaderboards across different scenarios. As a starting point, we conduct extensive experiments to benchmark baseline techniques. GRB is open-source and welcomes contributions from the community. Datasets, codes, leaderboards are available at https://cogdl.ai/grb/home.
Key facts. Cited by 44 papers in the map (data through 7 Oct 2026). Builds on 39 of its 52 references that are in the map. First posted on arXiv 8 Nov 2021.
Builds on
39 of 52 references.
References · 39
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,282
- 2017Graph Attention Networkscited by 8,854
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Layer Normalizationcited by 5,579
- 2013Intriguing properties of neural networkscited by 5,114
- 2018How Powerful are Graph Neural Networks?cited by 4,355
- 2013Auto-Encoding Variational Bayescited by 3,980
- 2020Open Graph Benchmark: Datasets for Machine Learning on Graphscited by 2,148
- 2016node2vec: Scalable Feature Learning for Networkscited by 1,913
27 more
- 2014DeepWalk: Online Learning of Social Representationscited by 1,543
- 2019Simplifying Graph Convolutional Networkscited by 1,470
- 2018Graph Convolutional Neural Networks for Web-Scale Recommender Systemscited by 1,133
- 2018Predict then Propagate: Graph Neural Networks meet Personalized PageRankcited by 987
- 2016Revisiting Semi-Supervised Learning with Graph Embeddingscited by 970
- 2020Benchmarking Graph Neural Networkscited by 672
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
- 2019GraphSAINT: Graph Sampling Based Inductive Learning Methodcited by 618
- 2019On Evaluating Adversarial Robustnesscited by 442
- 2018Adversarial Attacks on Neural Networks for Graph Datacited by 395
- 2020Graph Structure Learning for Robust Graph Neural Networkscited by 368
- 2018Adversarial Attack on Graph Structured Datacited by 300
- 2019Adversarial Attacks on Graph Neural Networks via Meta Learningcited by 261
- 2019Deep Graph Library: A Graph-Centric, Highly-Performant Package for Graph Neural Networkscited by 241
- 2020Graph Random Neural Network for Semi-Supervised Learning on Graphscited by 213
- 2017Network Embedding as Matrix Factorization: Unifying DeepWalk, LINE, PTE, and node2veccited by 197
- 2020GNNGuard: Defending Graph Neural Networks against Adversarial Attackscited by 195
- 2017Topology Adaptive Graph Convolutional Networkscited by 112
- 2018Adversarial Attacks on Node Embeddings via Graph Poisoningcited by 109
- 2019Graph Adversarial Training: Dynamically Regularizing Based on Graph Structurecited by 93
- 2020DeepRobust: A PyTorch Library for Adversarial Attacks and Defensescited by 78
- 2016Hiding Individuals and Communities in a Social Networkcited by 77
- 2021TDGIA:Effective Injection Attacks on Graph Neural Networkscited by 67
- 2018Fast Gradient Attack on Network Embeddingcited by 65
- 2020Scalable Attack on Graph Data by Injecting Vicious Nodescited by 50
- 2019Attacking Graph Convolutional Networks via Rewiringcited by 32
- 2019Dimensional Reweighting Graph Convolutional Networkscited by 4
Built on by
Citing papers per year: 2022: 9; 2023: 8; 2024: 11; 2025: 9; 2026: 7.
44 papers.
Sort:
By area:
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trendscited by 88
- 2022Evaluating Explainability for Graph Neural Networkscited by 85
- 2022BOND: Benchmarking Unsupervised Outlier Node Detection on Static Attributed Graphscited by 80
- 2022Understanding and Improving Graph Injection Attack by Promoting Unnoticeabilitycited by 62
- 2023Are Defenses for Graph Neural Networks Robust?cited by 38
- 2022On the Robustness of Graph Neural Diffusion to Topology Perturbationscited by 30
- 2023Adversarial Training for Graph Neural Networks: Pitfalls, Solutions, and New Directionscited by 28
- 2022EvenNet: Ignoring Odd-Hop Neighbors Improves Robustness of Graph Neural Networkscited by 26
- 2023From Continuous Dynamics to Graph Neural Networks: Neural Diffusion and Beyondcited by 26
- 2023Adversarial Robustness in Graph Neural Networks: A Hamiltonian Approachcited by 24
- 2022Evaluating Self-Supervised Learning for Molecular Graph Embeddingscited by 22
- 2024When Graph meets Multimodal: Benchmarking and Meditating on Multimodal Attributed Graphs Learningcited by 20
32 more
- 2023Revisiting Robustness in Graph Machine Learningcited by 19
- 2023Robust Mid-Pass Filtering Graph Convolutional Networkscited by 17
- 2022Characterizing the Influence of Graph Elementscited by 16
- 2025PLANETALIGN: A Comprehensive Python Library for Benchmarking Network Alignmentcited by 10
- 2024Coupling Graph Neural Networks with Fractional Order Continuous Dynamics: A Robustness Studycited by 9
- 2024Intruding with Words: Towards Understanding Graph Injection Attacks at the Text Levelcited by 9
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunitiescited by 8
- 2024Minimum Topology Attacks for Graph Neural Networkscited by 6
- 2025TabAttackBench: A Benchmark for Adversarial Attacks on Tabular Datacited by 4
- 2024Large Language Models for Link Stealing Attacks Against Graph Neural Networkscited by 3
- 2024Unveiling Privacy Vulnerabilities: Investigating the Role of Structure in Graph Datacited by 3
- 2024Faithful Interpretation for Graph Neural Networkscited by 3
- 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approachcited by 3
- 2024Graph Neural Networks Are More Than Filters: Revisiting and Benchmarking from A Spectral Perspectivecited by 3
- 2025Graph Defense Diffusion Modelcited by 3
- 2025Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspectivecited by 3
- 2025Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defensescited by 2
- 2023Resilient Graph Neural Networks: A Coupled Dynamical Systems Approachcited by 1
- 2025Robustness in Text-Attributed Graph Learning: Insights, Trade-offs, and New Defensescited by 1
- 2023Node Embedding from Hamiltonian Information Propagation in Graph Neural Networkscited by 0
- 2024Robust Subgraph Learning by Monitoring Early Training Representationscited by 0
- 2024On the Adversarial Robustness of Graph Neural Networks with Graph Reductioncited by 0
- 2025Poster: Enhancing GNN Robustness for Network Intrusion Detection via Agent-based Analysiscited by 0
- 2025Unveiling the Vulnerability of Graph-LLMs: An Interpretable Multi-Dimensional Adversarial Attack on TAGscited by 0
- 2025VISAT: Benchmarking Adversarial and Distribution Shift Robustness in Traffic Sign Recognition with Visual Attributescited by 0
- 2026Lyapunov Stable Graph Neural Flowcited by 0
- 2026Graph-Aware Stealthy Poison-Text Backdoors for Text-Attributed Graphscited by 0
- 2026Can LLMs Fool Graph Learning? Exploring Universal Adversarial Attacks on Text-Attributed Graphscited by 0
- 2026Adversarial Graph Neural Network Benchmarks: Towards Practical and Fair Evaluationcited by 0
- 2026On the Safety of Graph Representation Learningcited by 0
- 2026GAD in the Wild: Benchmarking Graph Anomaly Detection under Realistic Deployment Challengescited by 0
- 2026ZeroGAR: Benchmarking the Adversarial Robustness of Zero-Shot Graph Modelscited by 0
- 2026ZeroGAR: Benchmarking the Adversarial Robustness of Zero-Shot Graph Models27 Sep 2026
- 2026GAD in the Wild: Benchmarking Graph Anomaly Detection under Realistic Deployment Challenges8 May 2026
- 2026On the Safety of Graph Representation Learning7 May 2026
- 2026Adversarial Graph Neural Network Benchmarks: Towards Practical and Fair Evaluation7 May 2026
- 2026Can LLMs Fool Graph Learning? Exploring Universal Adversarial Attacks on Text-Attributed Graphs22 Mar 2026
- 2026Graph-Aware Stealthy Poison-Text Backdoors for Text-Attributed Graphs20 Mar 2026
- 2026Lyapunov Stable Graph Neural Flow13 Mar 2026
- 2025VISAT: Benchmarking Adversarial and Distribution Shift Robustness in Traffic Sign Recognition with Visual Attributes29 Oct 2025
- 2025Robustness in Text-Attributed Graph Learning: Insights, Trade-offs, and New Defenses20 Oct 2025
- 2025Unveiling the Vulnerability of Graph-LLMs: An Interpretable Multi-Dimensional Adversarial Attack on TAGs14 Oct 2025
- 2025Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses27 Aug 2025
- 2025Poster: Enhancing GNN Robustness for Network Intrusion Detection via Agent-based Analysis25 Jun 2025
32 more
- 2025PLANETALIGN: A Comprehensive Python Library for Benchmarking Network Alignment27 May 2025
- 2025TabAttackBench: A Benchmark for Adversarial Attacks on Tabular Data27 May 2025
- 2025Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective4 Feb 2025
- 2025Graph Defense Diffusion Model20 Jan 2025
- 2024Graph Neural Networks Are More Than Filters: Revisiting and Benchmarking from A Spectral Perspective10 Dec 2024
- 2024On the Adversarial Robustness of Graph Neural Networks with Graph Reduction8 Dec 2024
- 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approach6 Nov 2024
- 2024When Graph meets Multimodal: Benchmarking and Meditating on Multimodal Attributed Graphs Learning11 Oct 2024
- 2024Faithful Interpretation for Graph Neural Networks9 Oct 2024
- 2024Unveiling Privacy Vulnerabilities: Investigating the Role of Structure in Graph Data26 Jul 2024
- 2024Large Language Models for Link Stealing Attacks Against Graph Neural Networks22 Jun 2024
- 2024Intruding with Words: Towards Understanding Graph Injection Attacks at the Text Level26 May 2024
- 2024Robust Subgraph Learning by Monitoring Early Training Representations14 Mar 2024
- 2024Minimum Topology Attacks for Graph Neural Networks5 Mar 2024
- 2024Coupling Graph Neural Networks with Fractional Order Continuous Dynamics: A Robustness Study9 Jan 2024
- 2023Resilient Graph Neural Networks: A Coupled Dynamical Systems Approach12 Nov 2023
- 2023From Continuous Dynamics to Graph Neural Networks: Neural Diffusion and Beyond16 Oct 2023
- 2023Adversarial Robustness in Graph Neural Networks: A Hamiltonian Approach10 Oct 2023
- 2023Adversarial Training for Graph Neural Networks: Pitfalls, Solutions, and New Directions27 Jun 2023
- 2023Revisiting Robustness in Graph Machine Learning1 May 2023
- 2023Node Embedding from Hamiltonian Information Propagation in Graph Neural Networks2 Mar 2023
- 2023Robust Mid-Pass Filtering Graph Convolutional Networks16 Feb 2023
- 2023Are Defenses for Graph Neural Networks Robust?31 Jan 2023
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities17 Oct 2022
- 2022Characterizing the Influence of Graph Elements14 Oct 2022
- 2022On the Robustness of Graph Neural Diffusion to Topology Perturbations16 Sep 2022
- 2022Evaluating Explainability for Graph Neural Networks19 Aug 2022
- 2022BOND: Benchmarking Unsupervised Outlier Node Detection on Static Attributed Graphs21 Jun 2022
- 2022Evaluating Self-Supervised Learning for Molecular Graph Embeddings16 Jun 2022
- 2022EvenNet: Ignoring Odd-Hop Neighbors Improves Robustness of Graph Neural Networks27 May 2022
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trends16 May 2022
- 2022Understanding and Improving Graph Injection Attack by Promoting Unnoticeability16 Feb 2022
- 2025Graph Defense Diffusion Modelcited by 3
- 2025Graph Defense Diffusion Model20 Jan 2025
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trendscited by 88
- 2022Evaluating Explainability for Graph Neural Networkscited by 85
- 2022BOND: Benchmarking Unsupervised Outlier Node Detection on Static Attributed Graphscited by 80
- 2022Understanding and Improving Graph Injection Attack by Promoting Unnoticeabilitycited by 62
- 2023Are Defenses for Graph Neural Networks Robust?cited by 38
- 2022On the Robustness of Graph Neural Diffusion to Topology Perturbationscited by 30
- 2023Adversarial Training for Graph Neural Networks: Pitfalls, Solutions, and New Directionscited by 28
- 2022EvenNet: Ignoring Odd-Hop Neighbors Improves Robustness of Graph Neural Networkscited by 26
- 2023From Continuous Dynamics to Graph Neural Networks: Neural Diffusion and Beyondcited by 26
- 2023Adversarial Robustness in Graph Neural Networks: A Hamiltonian Approachcited by 24
- 2022Evaluating Self-Supervised Learning for Molecular Graph Embeddingscited by 22
- 2024When Graph meets Multimodal: Benchmarking and Meditating on Multimodal Attributed Graphs Learningcited by 20
12 most cited of 41 All 41 (JSON)
- 2026ZeroGAR: Benchmarking the Adversarial Robustness of Zero-Shot Graph Models27 Sep 2026
- 2026GAD in the Wild: Benchmarking Graph Anomaly Detection under Realistic Deployment Challenges8 May 2026
- 2026On the Safety of Graph Representation Learning7 May 2026
- 2026Adversarial Graph Neural Network Benchmarks: Towards Practical and Fair Evaluation7 May 2026
- 2026Can LLMs Fool Graph Learning? Exploring Universal Adversarial Attacks on Text-Attributed Graphs22 Mar 2026
- 2026Lyapunov Stable Graph Neural Flow13 Mar 2026
- 2025VISAT: Benchmarking Adversarial and Distribution Shift Robustness in Traffic Sign Recognition with Visual Attributes29 Oct 2025
- 2025Robustness in Text-Attributed Graph Learning: Insights, Trade-offs, and New Defenses20 Oct 2025
- 2025Unveiling the Vulnerability of Graph-LLMs: An Interpretable Multi-Dimensional Adversarial Attack on TAGs14 Oct 2025
- 2025Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses27 Aug 2025
- 2025PLANETALIGN: A Comprehensive Python Library for Benchmarking Network Alignment27 May 2025
- 2025TabAttackBench: A Benchmark for Adversarial Attacks on Tabular Data27 May 2025
12 newest of 41 All 41 (JSON)