{"type":"ScholarlyArticle","title":"HeTa: Relation-wise Heterogeneous Graph Foundation Attack Model","authors":[{"name":"Yuling Wang","slug":"yuling-wang","given":"Yuling","family":"Wang","affiliation":""},{"name":"Zihui Chen","slug":"zihui-chen","given":"Zihui","family":"Chen","affiliation":""},{"name":"Pengfei Jiao","slug":"pengfei-jiao","given":"Pengfei","family":"Jiao","affiliation":""},{"name":"Xiao Wang","slug":"xiao-wang","given":"Xiao","family":"Wang","affiliation":""}],"abstract":"Heterogeneous Graph Neural Networks (HGNNs) are vulnerable, highlighting the need for tailored attacks to assess their robustness and ensure security. However, existing HGNN attacks often require complex retraining of parameters to generate specific perturbations for new scenarios. Recently, foundation models have opened new horizons for the generalization of graph neural networks by capturing shared semantics across various graph distributions. This leads us to ask: Can we design a foundation attack model for HGNNs that enables generalizable perturbations across different HGNNs, and quickly adapts to new heterogeneous graphs (HGs)? Empirical findings reveal that, despite significant differences in model design and parameter space, different HGNNs surprisingly share common vulnerability patterns from a relation-aware perspective. Therefore, we explore how to design foundation HGNN  attack criteria by mining shared attack units. In this paper,  we propose a novel relation-wise heterogeneous graph foundation attack model, HeTa. We introduce a foundation surrogate model to align heterogeneity and identify the importance of shared relation-aware attack units. Building on this, we implement a serialized relation-by-relation attack based on the identified relational weights. In this way, the perturbation can be transferred to various target HGNNs and easily fine-tuned for new HGs.  Extensive experiments exhibit powerful attack performances and generalizability of our method.","doi":"10.24963/ijcai.2025/384","url":"https://ijcai.org/proceedings/2025/384","pdf":"https://ijcai.org/proceedings/2025/0384.pdf","markdown":"https://ijcai.org/proceedings/2025/384.md","bibtex":"https://ijcai.org/proceedings/2025/bibtex/384","volume":{"slug":"2025","title":"Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence","short_title":"IJCAI 2025","url":"https://ijcai.org/proceedings/2025/","year":2025,"location":"Montreal, Canada","dates":"16-22 August 2025","editors":"James Kwok","isbn":"978-1-956792-06-5","publisher":"International Joint Conferences on Artificial Intelligence Organization","doi_prefix":"10.24963/ijcai.2025"},"section":"Data Mining","track":"Main Track","number":384,"pages":{"first":3453,"last":3461},"keywords":["Data Mining: DM: Mining heterogenous data","Data Mining: DM: Mining graphs"],"videos":[],"references":[],"license_note":"Copyright International Joint Conferences on Artificial Intelligence."}