LiSA: Leveraging Link Recommender to Attack Graph Neural Networks via Subgraph Injection (Extended Abstract)
Proceedings of the Thirty-Fifth International Joint Conference on Artificial Intelligence. Sister Conferences Best Papers. Pages 8306-8310.
https://doi.org/10.24963/ijcai.2026/931
Keywords
- Data Mining: Privacy-preserving data mining
- Data Mining: Recommender systems
- Machine Learning: Adversarial machine learning
- AI Ethics, Trust, Fairnes: Safety and robustness
Abstract
Graph Neural Networks (GNNs) have demonstrated remarkable proficiency in modeling data with graph structures, yet recent research reveals their susceptibility to adversarial attacks. Traditional attack methodologies, which rely on manipulating the original graph or adding links to artificially created nodes, often prove impractical in real-world settings. This paper introduces a novel adversarial scenario involving the injection of an isolated subgraph to deceive both the link recommender and the node classifier within a GNN system. Specifically, the link recommender is mislead to propose links between targeted victim nodes and the subgraph, encouraging users to unintentionally establish connections and that would degrade the node classification accuracy, thereby facilitating a successful attack. To address this, we present the LiSA framework, which employs a dual surrogate model and bi-level optimization to simultaneously meet two adversarial objectives. Extensive experiments on real-world datasets demonstrate the effectiveness of our method.
@inproceedings{ijcai2026p931,
title = {LiSA: Leveraging Link Recommender to Attack Graph Neural Networks via Subgraph Injection (Extended Abstract)},
author = {Zhang, Wenlun and Dai, Enyan and Yoshioka, Kentaro},
booktitle = {Proceedings of the Thirty-Fifth International Joint Conference on
Artificial Intelligence, {IJCAI-26}},
publisher = {International Joint Conferences on Artificial Intelligence Organization},
editor = {Diego Calvanese},
pages = {8306--8310},
year = {2026},
month = {8},
note = {Sister Conferences Best Papers},
doi = {10.24963/ijcai.2026/931},
url = {https://doi.org/10.24963/ijcai.2026/931},
}
TY - CPAPER TI - LiSA: Leveraging Link Recommender to Attack Graph Neural Networks via Subgraph Injection (Extended Abstract) AU - Zhang, Wenlun AU - Dai, Enyan AU - Yoshioka, Kentaro T2 - Proceedings of the Thirty-Fifth International Joint Conference on Artificial Intelligence, IJCAI-26 PB - International Joint Conferences on Artificial Intelligence Organization PY - 2026 SP - 8306 EP - 8310 DO - 10.24963/ijcai.2026/931 UR - https://doi.org/10.24963/ijcai.2026/931 ER -Copied
Machine-readable versions of this paper, for tools and AI agents: