| import torch |
| import numpy as np |
| import torch.nn.functional as F |
| import torch.optim as optim |
| from deeprobust.graph.defense import GCN |
| from deeprobust.graph.global_attack import MetaApprox, Metattack |
| from deeprobust.graph.utils import * |
| from deeprobust.graph.data import Dataset |
| import argparse |
|
|
| parser = argparse.ArgumentParser() |
| parser.add_argument('--no-cuda', action='store_true', default=False, |
| help='Disables CUDA training.') |
| parser.add_argument('--seed', type=int, default=15, help='Random seed.') |
| parser.add_argument('--epochs', type=int, default=200, |
| help='Number of epochs to train.') |
| parser.add_argument('--lr', type=float, default=0.01, |
| help='Initial learning rate.') |
| parser.add_argument('--weight_decay', type=float, default=5e-4, |
| help='Weight decay (L2 loss on parameters).') |
| parser.add_argument('--hidden', type=int, default=16, |
| help='Number of hidden units.') |
| parser.add_argument('--dropout', type=float, default=0.5, |
| help='Dropout rate (1 - keep probability).') |
| parser.add_argument('--dataset', type=str, default='citeseer', choices=['cora', 'cora_ml', 'citeseer', 'polblogs', 'pubmed'], help='dataset') |
| parser.add_argument('--ptb_rate', type=float, default=0.05, help='pertubation rate') |
| parser.add_argument('--model', type=str, default='Meta-Self', |
| choices=['Meta-Self', 'A-Meta-Self', 'Meta-Train', 'A-Meta-Train'], help='model variant') |
|
|
| args = parser.parse_args() |
|
|
| device = torch.device("cuda:0" if torch.cuda.is_available() else "cpu") |
|
|
| np.random.seed(args.seed) |
| torch.manual_seed(args.seed) |
| if device != 'cpu': |
| torch.cuda.manual_seed(args.seed) |
|
|
| data = Dataset(root='/tmp/', name=args.dataset, setting='mettack') |
| adj, features, labels = data.adj, data.features, data.labels |
| idx_train, idx_val, idx_test = data.idx_train, data.idx_val, data.idx_test |
| idx_unlabeled = np.union1d(idx_val, idx_test) |
|
|
| perturbations = int(args.ptb_rate * (adj.sum()//2)) |
| adj, features, labels = preprocess(adj, features, labels, preprocess_adj=False) |
|
|
| |
| surrogate = GCN(nfeat=features.shape[1], nclass=labels.max().item()+1, nhid=16, |
| dropout=0.5, with_relu=False, with_bias=True, weight_decay=5e-4, device=device) |
|
|
| surrogate = surrogate.to(device) |
| surrogate.fit(features, adj, labels, idx_train) |
|
|
| |
| if 'Self' in args.model: |
| lambda_ = 0 |
| if 'Train' in args.model: |
| lambda_ = 1 |
| if 'Both' in args.model: |
| lambda_ = 0.5 |
|
|
| if 'A' in args.model: |
| model = MetaApprox(model=surrogate, nnodes=adj.shape[0], feature_shape=features.shape, attack_structure=True, attack_features=False, device=device, lambda_=lambda_) |
|
|
| else: |
| model = Metattack(model=surrogate, nnodes=adj.shape[0], feature_shape=features.shape, attack_structure=True, attack_features=False, device=device, lambda_=lambda_) |
|
|
| model = model.to(device) |
|
|
| def test(adj): |
| ''' test on GCN ''' |
|
|
| |
| gcn = GCN(nfeat=features.shape[1], |
| nhid=args.hidden, |
| nclass=labels.max().item() + 1, |
| dropout=args.dropout, device=device) |
| gcn = gcn.to(device) |
| gcn.fit(features, adj, labels, idx_train) |
| |
| output = gcn.output.cpu() |
| loss_test = F.nll_loss(output[idx_test], labels[idx_test]) |
| acc_test = accuracy(output[idx_test], labels[idx_test]) |
| print("Test set results:", |
| "loss= {:.4f}".format(loss_test.item()), |
| "accuracy= {:.4f}".format(acc_test.item())) |
|
|
| return acc_test.item() |
|
|
|
|
| def main(): |
|
|
| model.attack(features, adj, labels, idx_train, idx_unlabeled, perturbations, ll_constraint=False) |
| print('=== testing GCN on original(clean) graph ===') |
| test(adj) |
| modified_adj = model.modified_adj |
| |
| test(modified_adj) |
|
|
| |
| |
| |
|
|
| if __name__ == '__main__': |
| main() |
|
|
|
|