Learning on Graphs with Large Language Models(LLMs): A Deep Dive into Model Robustness
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) have demonstrated remarkable performance across various natural language processing tasks. Recently, several LLMs-based pipelines have been developed to enhance learning on graphs with text attributes, showcasing promising performance. However, graphs are well-known to be susceptible to adversarial attacks and it remains unclear whether LLMs exhibit robustness in learning on graphs. To address this gap, our work aims to explore the potential of LLMs in the context of adversarial attacks on graphs. Specifically, we investigate the robustness against graph structural and textual perturbations in terms of two dimensions: LLMs-as-Enhancers and LLMs-as-Predictors. Through extensive experiments, we find that, compared to shallow models, both LLMs-as-Enhancers and LLMs-as-Predictors offer superior robustness against structural and textual attacks.Based on these findings, we carried out additional analyses to investigate the underlying causes. Furthermore, we have made our benchmark library openly available to facilitate quick and fair evaluations, and to encourage ongoing innovative research in this field.
Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). Builds on 45 of its 57 references that are in the map. First posted on arXiv 16 Jul 2024.
Builds on
45 of 57 references.
References · 45
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,282
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2017Graph Attention Networkscited by 8,854
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2019Fast Graph Representation Learning with PyTorch Geometriccited by 2,414
- 2020Open Graph Benchmark: Datasets for Machine Learning on Graphscited by 2,148
- 2022Text Embeddings by Weakly-Supervised Contrastive Pre-trainingcited by 1,216
- 2018Adversarial Attacks on Neural Networks for Graph Datacited by 395
- 2020Graph Structure Learning for Robust Graph Neural Networkscited by 368
33 more
- 2023Exploring the Potential of Large Language Models (LLMs) in Learning on Graphscited by 271
- 2020Wiki-CS: A Wikipedia-Based Benchmark for Graph Neural Networkscited by 253
- 2023Can Language Models Solve Graph Problems in Natural Language?cited by 249
- 2023Prompting Large Language Model for Machine Translation: A Case Studycited by 247
- 2023GraphGPT: Graph Instruction Tuning for Large Language Modelscited by 223
- 2023Language is All a Graph Needscited by 219
- 2023GPT4Graph: Can Large Language Models Understand Graph Structured Data ? An Empirical Evaluation and Benchmarkingcited by 209
- 2019Topology Attack and Defense for Graph Neural Networks: An Optimization Perspectivecited by 196
- 2023LLMRec: Large Language Models with Graph Augmentation for Recommendationcited by 171
- 2022Learning on Large-scale Text-attributed Graphs via Variational Inferencecited by 153
- 2021Node Feature Extraction by Self-Supervised Multi-scale Neighborhood Predictioncited by 137
- 2023Harnessing Explanations: LLM-to-LM Interpreter for Enhanced Text-Attributed Graph Representation Learningcited by 132
- 2023GraphLLM: Boosting Graph Reasoning Ability of Large Language Modelcited by 105
- 2023Text Classification via Large Language Modelscited by 104
- 2021Robustness of Graph Neural Networks at Scalecited by 100
- 2023AnglE-optimized Text Embeddingscited by 98
- 2023InstructMol: Multi-Modal Integration for Building a Versatile and Reliable Molecular Assistant in Drug Discoverycited by 86
- 2023GIT-Mol: A Multi-modal Large Language Model for Molecular Science with Graph, Image, and Textcited by 82
- 2020DeepRobust: A PyTorch Library for Adversarial Attacks and Defensescited by 78
- 2020Towards More Practical Adversarial Attacks on Graph Neural Networkscited by 76
- 2023SimTeG: A Frustratingly Simple Approach Improves Textual Graph Learningcited by 73
- 2023Label-free Node Classification on Graphs with Large Language Models (LLMS)cited by 72
- 2023GIMLET: A Unified Graph-Text Model for Instruction-Based Molecule Zero-Shot Learningcited by 70
- 2019A Restricted Black-box Adversarial Framework Towards Attacking Graph Embedding Modelscited by 68
- 2021Graph-Based Deep Learning for Medical Diagnosis and Analysis: Past, Present and Futurecited by 67
- 2023Can Large Language Models Empower Molecular Property Prediction?cited by 43
- 2022SemAttack: Natural Textual Attacks via Different Semantic Spacescited by 42
- 2023Disentangled Representation Learning with Large Language Models for Text-Attributed Graphscited by 36
- 2019Attacking Graph Convolutional Networks via Rewiringcited by 32
- 2024A Review of Graph Neural Networks in Epidemic Modelingcited by 31
- 2023Generation-driven Contrastive Self-training for Zero-shot Text Classification with Instruction-following LLMcited by 11
- 2023Sentiment Analysis through LLM Negotiationscited by 11
- 2019Time-aware Gradient Attack on Dynamic Network Link Predictioncited by 10
Built on by
Citing papers per year: 2025: 8; 2026: 3.
11 papers.
- 2025Graph2text or Graph2token: A Perspective of Large Language Models for Graph Learningcited by 12
- 2025TrustGLM: Evaluating the Robustness of GraphLLMs Against Prompt, Text, and Structure Attackscited by 5
- 2026Are LLM-Enhanced Graph Neural Networks Robust against Poisoning Attacks?cited by 4
- 2025CAT: Can Trust be Predicted with Context-Awareness in Dynamic Heterogeneous Networks?cited by 2
- 2026Revisiting Graph-Tokenizing Large Language Models: A Systematic Evaluation of Graph Token Understandingcited by 2
- 2025Trustworthy GNNs with LLMs: A Systematic Review and Taxonomycited by 1
- 2025Tackling Distribution Shift in LLM via KILO: Knowledge-Instructed Learning for Continual Adaptationcited by 1
- 2025Robustness in Text-Attributed Graph Learning: Insights, Trade-offs, and New Defensescited by 1
- 2025Navigating the Black Box: Leveraging LLMs for Effective Text-Level Graph Injection Attackscited by 0
- 2025GRAPHTEXTACK: A Realistic Black-Box Node Injection Attack on LLM-Enhanced GNNscited by 0
- 2026ZeroGAR: Benchmarking the Adversarial Robustness of Zero-Shot Graph Modelscited by 0
- 2026ZeroGAR: Benchmarking the Adversarial Robustness of Zero-Shot Graph Models27 Sep 2026
- 2026Revisiting Graph-Tokenizing Large Language Models: A Systematic Evaluation of Graph Token Understanding5 May 2026
- 2026Are LLM-Enhanced Graph Neural Networks Robust against Poisoning Attacks?27 Mar 2026
- 2025CAT: Can Trust be Predicted with Context-Awareness in Dynamic Heterogeneous Networks?12 Dec 2025
- 2025GRAPHTEXTACK: A Realistic Black-Box Node Injection Attack on LLM-Enhanced GNNs16 Nov 2025
- 2025Robustness in Text-Attributed Graph Learning: Insights, Trade-offs, and New Defenses20 Oct 2025
- 2025Tackling Distribution Shift in LLM via KILO: Knowledge-Instructed Learning for Continual Adaptation5 Aug 2025
- 2025Navigating the Black Box: Leveraging LLMs for Effective Text-Level Graph Injection Attacks16 Jun 2025
- 2025TrustGLM: Evaluating the Robustness of GraphLLMs Against Prompt, Text, and Structure Attacks13 Jun 2025
- 2025Trustworthy GNNs with LLMs: A Systematic Review and Taxonomy12 Feb 2025
- 2025Graph2text or Graph2token: A Perspective of Large Language Models for Graph Learning2 Jan 2025