mlsanityData to 7 Oct 2026

Graph Robustness Benchmark: Benchmarking the Adversarial Robustness of Graph Machine Learning

arXiv 2111.04314 ↗First posted 8 Nov 2021cs.LG cs.AI cs.CRcited by 44

Not on the map. Why?

Abstract (arXiv)

Adversarial attacks on graphs have posed a major threat to the robustness of graph machine learning (GML) models. Naturally, there is an ever-escalating arms race between attackers and defenders. However, the strategies behind both sides are often not fairly compared under the same and realistic conditions. To bridge this gap, we present the Graph Robustness Benchmark (GRB) with the goal of providing a scalable, unified, modular, and reproducible evaluation for the adversarial robustness of GML models. GRB standardizes the process of attacks and defenses by 1) developing scalable and diverse datasets, 2) modularizing the attack and defense implementations, and 3) unifying the evaluation protocol in refined scenarios. By leveraging the GRB pipeline, the end-users can focus on the development of robust GML models with automated data processing and experimental evaluations. To support open and reproducible research on graph adversarial learning, GRB also hosts public leaderboards across different scenarios. As a starting point, we conduct extensive experiments to benchmark baseline techniques. GRB is open-source and welcomes contributions from the community. Datasets, codes, leaderboards are available at https://cogdl.ai/grb/home.

Key facts. Cited by 44 papers in the map (data through 7 Oct 2026). Builds on 39 of its 52 references that are in the map. First posted on arXiv 8 Nov 2021.

Builds on

39 of 52 references.

References · 39

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  2. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
  3. 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,282
  4. 2017Graph Attention Networkscited by 8,854
  5. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  6. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  7. 2016Layer Normalizationcited by 5,579
  8. 2013Intriguing properties of neural networkscited by 5,114
  9. 2018How Powerful are Graph Neural Networks?cited by 4,355
  10. 2013Auto-Encoding Variational Bayescited by 3,980
  11. 2020Open Graph Benchmark: Datasets for Machine Learning on Graphscited by 2,148
  12. 2016node2vec: Scalable Feature Learning for Networkscited by 1,913
27 more
  1. 2014DeepWalk: Online Learning of Social Representationscited by 1,543
  2. 2019Simplifying Graph Convolutional Networkscited by 1,470
  3. 2018Graph Convolutional Neural Networks for Web-Scale Recommender Systemscited by 1,133
  4. 2018Predict then Propagate: Graph Neural Networks meet Personalized PageRankcited by 987
  5. 2016Revisiting Semi-Supervised Learning with Graph Embeddingscited by 970
  6. 2020Benchmarking Graph Neural Networkscited by 672
  7. 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
  8. 2019GraphSAINT: Graph Sampling Based Inductive Learning Methodcited by 618
  9. 2019On Evaluating Adversarial Robustnesscited by 442
  10. 2018Adversarial Attacks on Neural Networks for Graph Datacited by 395
  11. 2020Graph Structure Learning for Robust Graph Neural Networkscited by 368
  12. 2018Adversarial Attack on Graph Structured Datacited by 300
  13. 2019Adversarial Attacks on Graph Neural Networks via Meta Learningcited by 261
  14. 2019Deep Graph Library: A Graph-Centric, Highly-Performant Package for Graph Neural Networkscited by 241
  15. 2020Graph Random Neural Network for Semi-Supervised Learning on Graphscited by 213
  16. 2017Network Embedding as Matrix Factorization: Unifying DeepWalk, LINE, PTE, and node2veccited by 197
  17. 2020GNNGuard: Defending Graph Neural Networks against Adversarial Attackscited by 195
  18. 2017Topology Adaptive Graph Convolutional Networkscited by 112
  19. 2018Adversarial Attacks on Node Embeddings via Graph Poisoningcited by 109
  20. 2019Graph Adversarial Training: Dynamically Regularizing Based on Graph Structurecited by 93
  21. 2020DeepRobust: A PyTorch Library for Adversarial Attacks and Defensescited by 78
  22. 2016Hiding Individuals and Communities in a Social Networkcited by 77
  23. 2021TDGIA:Effective Injection Attacks on Graph Neural Networkscited by 67
  24. 2018Fast Gradient Attack on Network Embeddingcited by 65
  25. 2020Scalable Attack on Graph Data by Injecting Vicious Nodescited by 50
  26. 2019Attacking Graph Convolutional Networks via Rewiringcited by 32
  27. 2019Dimensional Reweighting Graph Convolutional Networkscited by 4

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2022: 9; 2023: 8; 2024: 11; 2025: 9; 2026: 7.

44 papers.

Sort:

By area:

  1. 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trendscited by 88
  2. 2022Evaluating Explainability for Graph Neural Networkscited by 85
  3. 2022BOND: Benchmarking Unsupervised Outlier Node Detection on Static Attributed Graphscited by 80
  4. 2022Understanding and Improving Graph Injection Attack by Promoting Unnoticeabilitycited by 62
  5. 2023Are Defenses for Graph Neural Networks Robust?cited by 38
  6. 2022On the Robustness of Graph Neural Diffusion to Topology Perturbationscited by 30
  7. 2023Adversarial Training for Graph Neural Networks: Pitfalls, Solutions, and New Directionscited by 28
  8. 2022EvenNet: Ignoring Odd-Hop Neighbors Improves Robustness of Graph Neural Networkscited by 26
  9. 2023From Continuous Dynamics to Graph Neural Networks: Neural Diffusion and Beyondcited by 26
  10. 2023Adversarial Robustness in Graph Neural Networks: A Hamiltonian Approachcited by 24
  11. 2022Evaluating Self-Supervised Learning for Molecular Graph Embeddingscited by 22
  12. 2024When Graph meets Multimodal: Benchmarking and Meditating on Multimodal Attributed Graphs Learningcited by 20
32 more
  1. 2023Revisiting Robustness in Graph Machine Learningcited by 19
  2. 2023Robust Mid-Pass Filtering Graph Convolutional Networkscited by 17
  3. 2022Characterizing the Influence of Graph Elementscited by 16
  4. 2025PLANETALIGN: A Comprehensive Python Library for Benchmarking Network Alignmentcited by 10
  5. 2024Coupling Graph Neural Networks with Fractional Order Continuous Dynamics: A Robustness Studycited by 9
  6. 2024Intruding with Words: Towards Understanding Graph Injection Attacks at the Text Levelcited by 9
  7. 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunitiescited by 8
  8. 2024Minimum Topology Attacks for Graph Neural Networkscited by 6
  9. 2025TabAttackBench: A Benchmark for Adversarial Attacks on Tabular Datacited by 4
  10. 2024Large Language Models for Link Stealing Attacks Against Graph Neural Networkscited by 3
  11. 2024Unveiling Privacy Vulnerabilities: Investigating the Role of Structure in Graph Datacited by 3
  12. 2024Faithful Interpretation for Graph Neural Networkscited by 3
  13. 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approachcited by 3
  14. 2024Graph Neural Networks Are More Than Filters: Revisiting and Benchmarking from A Spectral Perspectivecited by 3
  15. 2025Graph Defense Diffusion Modelcited by 3
  16. 2025Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspectivecited by 3
  17. 2025Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defensescited by 2
  18. 2023Resilient Graph Neural Networks: A Coupled Dynamical Systems Approachcited by 1
  19. 2025Robustness in Text-Attributed Graph Learning: Insights, Trade-offs, and New Defensescited by 1
  20. 2023Node Embedding from Hamiltonian Information Propagation in Graph Neural Networkscited by 0
  21. 2024Robust Subgraph Learning by Monitoring Early Training Representationscited by 0
  22. 2024On the Adversarial Robustness of Graph Neural Networks with Graph Reductioncited by 0
  23. 2025Poster: Enhancing GNN Robustness for Network Intrusion Detection via Agent-based Analysiscited by 0
  24. 2025Unveiling the Vulnerability of Graph-LLMs: An Interpretable Multi-Dimensional Adversarial Attack on TAGscited by 0
  25. 2025VISAT: Benchmarking Adversarial and Distribution Shift Robustness in Traffic Sign Recognition with Visual Attributescited by 0
  26. 2026Lyapunov Stable Graph Neural Flowcited by 0
  27. 2026Graph-Aware Stealthy Poison-Text Backdoors for Text-Attributed Graphscited by 0
  28. 2026Can LLMs Fool Graph Learning? Exploring Universal Adversarial Attacks on Text-Attributed Graphscited by 0
  29. 2026Adversarial Graph Neural Network Benchmarks: Towards Practical and Fair Evaluationcited by 0
  30. 2026On the Safety of Graph Representation Learningcited by 0
  31. 2026GAD in the Wild: Benchmarking Graph Anomaly Detection under Realistic Deployment Challengescited by 0
  32. 2026ZeroGAR: Benchmarking the Adversarial Robustness of Zero-Shot Graph Modelscited by 0