Skip to content
InfoResearchPeer-reviewed

UAAD: A unified anomaly-aware defense against diverse backdoor attacks on graph neural networks

Published
Record updated
View JSON

Summary

UAAD (Unified Anomaly-Aware Defense) is a framework that mitigates diverse backdoor attacks on graph neural networks. It builds a pseudo-clean reference distribution with spectral clustering, scores suspicious nodes with Mahalanobis distance, and prunes suspicious edges with an adaptive Gaussian Mixture Model, without fixed thresholds. In GCN-based evaluation on five real-world datasets, its mean ASR stays at or below 0.0775 against GTA, UGBA, and DPGBA, with a dataset-dependent clean-accuracy trade-off.

Mitigation

UAAD is the proposed defense: an anomaly-aware framework that removes suspicious edges through adaptive GMM-based pruning and uses edge-level anomaly priors for joint training.