Are Gradients on Graph Structure Reliable in Gray-box Attacks?

Zihan Liu, Yun Luo, Lirong Wu +3

Graph edge perturbations are dedicated to damaging the prediction of graph neural networks by modifying the graph structure. Previous gray-box attackers employ gradients from the s…