Towards Robustness of Graph Neural Networks to Structural Poisoning Attacks
Blind, In Submission
We aim to enhance the robustness of GNNs under structural poisoning attacks from both theoretical and empirical aspects. We certify the robustness of node classification with GNNs using data-dependent random noise added to edges and non-edges at training. In addition, we also propose a practical, albeit noncertified, approach that exhibits significantly better robust accuracy on two different GNN models (GCNs and PPNP) against state-of-the-art poisoning attacks.
Towards Inspecting and Eliminating Trojan Backdoors in Deep Neural Networks
Wenbo Guo*, Lun Wang*, Yan Xu, Xinyu Xing, Min Du,
Dawn Song, in Proceedings of the IEEE International Conference on Data Mining (ICDM), Sorrento, Italy, November 2020 (Oral Presentation)
A trojan backdoor is a hidden pattern typically implanted in a deep neural network. We propose TABOR (Towards Inspecting and Eliminating Trojan Backdoors in AI Systems) and formalize trojan detection as an optimization problem. First, we design new regularization terms for our object function, which could shrink the adversarial sample subspace. Second, we leverage the idea of explainable AI to further prune irrelevant adversarial samples and thus minimizes incorrect trojan detection. Last but not least, we invent a new anomaly detection method to eliminate the adversarial samples mistakenly pinpointed as malicious triggers in a clean model.
A Generic Technique for Counters to Improve
Space Efficiency
Xilai Liu*, Yan Xu*, Peng Liu, Tong Yang, Jiaqi Xu, Lun Wang, Gaogang Xie, Steve Uhlig, in the IEEE/ACM Transactions on Networking, 2021
We propose a generic technique: SElf-ADaptive counters (SEAD Counter). The counter could be added with a set of predefined probability, and therefore we can improve the space efficiency. This technique is very useful when the space of counters is limited, like on-chip memory. We proposed two versions of SA Counter: the static version and the dynamic version. Our method is generic as it can be both applied to sketches and bloom filters.