mlsanityData to 14 Oct 2026

Let Prompts Bridge Defense Knowledge: Transferable Graph Purification via Vulnerability-Aware GPL

arXiv 2608.29054 ↗First posted 29 Aug 2026cs.AIcited by 0

Not on the map. Why?

Abstract (arXiv)

Graph Neural Networks (GNNs) have emerged as a cornerstone for representing complex relational dependencies in diverse multimedia tasks, particularly in cross-platform user interest modeling and cross-modal semantic alignment. In the real world, a practical defense against graph adversarial perturbations is needed. However, we observe that the prevailing adversarial purification methods are essentially domain-restricted defenses, which leads to the following shortcomings: (1) single-domain data provides insufficient structural and semantic diversity for learning robust purification criteria; (2) training of domain-specific defense strategies from scratch consumes substantial computational cost. To address the above limitations, we propose a transferable graph purification scheme, named ProGAP, to bridge adversarial defense knowledge via vulnerability-aware graph prompt learning. Firstly, to capture universal adversarial patterns, a perturbation-capture edge detector is pretrained on data-rich graphs by jointly modeling topological and semantic information. Subsequently, to achieve more knowledge transfer w.r.t. robustness, vulnerability-aware prompts are designed that inject targeted purification guidance into biased nodes, during which the pretrained detector adapts to distribution shifts in downstream graphs without parameter-laborious updates. Experimental results demonstrate that compared with state-of-the-art baselines, our ProGAP achieves 1%-9% improvement, and reduces the time consumption by up to 2.2x. The code for ProGAP is available at https://github.com/Lieyoufffff/ProGAP.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 23 of its 49 references that are in the map. First posted on arXiv 29 Aug 2026.

Builds on

23 of 49 references.

References · 23

  1. 2017Inductive Representation Learning on Large Graphscited by 6,320
  2. 2018Pitfalls of Graph Neural Network Evaluationcited by 1,007
  3. 2016Revisiting Semi-Supervised Learning with Graph Embeddingscited by 976
  4. 2020Geom-GCN: Geometric Graph Convolutional Networkscited by 826
  5. 2024Parameter-Efficient Fine-Tuning for Large Models: A Comprehensive Surveycited by 656
  6. 2020Graph Structure Learning for Robust Graph Neural Networkscited by 371
  7. 2019Adversarial Attacks on Graph Neural Networks via Meta Learningcited by 261
  8. 2020Graph Random Neural Network for Semi-Supervised Learning on Graphscited by 213
  9. 2019Topology Attack and Defense for Graph Neural Networks: An Optimization Perspectivecited by 196
  10. 2020GNNGuard: Defending Graph Neural Networks against Adversarial Attackscited by 195
  11. 2021Robustness of Graph Neural Networks at Scalecited by 100
  12. 2023MultiGPrompt for Multi-Task Pre-Training and Prompting on Graphscited by 40
11 more
  1. 2023Are Defenses for Graph Neural Networks Robust?cited by 38
  2. 2023GraphControl: Adding Conditional Control to Universal Graph Pre-trained Models for Graph Domain Transfer Learningcited by 33
  3. 2023AdapterGNN: Parameter-Efficient Fine-Tuning Improves Generalization in GNNscited by 26
  4. 2023G-Adapter: Towards Structure-Aware Parameter-Efficient Transfer Learning for Graph Transformer Networkscited by 25
  5. 2023Adversarial Robustness in Graph Neural Networks: A Hamiltonian Approachcited by 24
  6. 2024GraphLoRA: Structure-Aware Contrastive Low-Rank Adaptation for Cross-Graph Transfer Learningcited by 21
  7. 2023Towards Reasonable Budget Allocation in Untargeted Graph Structure Attacks via Gradient Debiascited by 16
  8. 2024SelfPrompt: Autonomously Evaluating LLM Robustness via Domain-Constrained Knowledge Guidelines and Refined Adversarial Promptscited by 10
  9. 2026Disentangling Adversarial Prompts: A Semantic-Graph Defense for Robust LLM Securitycited by 8
  10. 2025Graph Unlearning Meets Influence-aware Negative Preference Optimizationcited by 3
  11. 2024Debiased Graph Poisoning Attack via Contrastive Surrogate Objectivecited by 2

Built on by

Not cited yet.