Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Certifiable Robustness and Robust Training for Graph Convolutional
  Networks   Recent works show that Graph Neural Networks (GNNs) are highly non-robust
with respect to adversarial attacks on both the graph structure and the node
attributes, making their outcomes unreliable. We propose the first method for
certifiable (non-)robustness of graph convolutional networks with respect to
perturbations of the node attributes. We consider the case of binary node
attributes (e.g. bag-of-words) and perturbations that are L_0-bounded. If a
node has been certified with our method, it is guaranteed to be robust under
any possible perturbation given the attack model. Likewise, we can certify
non-robustness. Finally, we propose a robust semi-supervised training procedure
that treats the labeled and unlabeled nodes jointly. As shown in our
experimental evaluation, our method significantly improves the robustness of
the GNN with only minimal effect on the predictive accuracy.

4
The categories of this paper are: cond-mat
15
The categories of this paper are: nucl-ex
7
The categories of this paper are: hep-th
36
The categories of this paper are: cmp-lg
8
The categories of this paper are: hep-ex
25
The categories of this paper are: patt-sol
21
The categories of this paper are: adap-org
26
The categories of this paper are: bayes-an
32
The categories of this paper are: atom-ph
23
The categories of this paper are: solv-int
12
The categories of this paper are: nucl-th
22
The categories of this paper are: chao-dyn
24
The categories of this paper are: dg-ga
0
The categories of this paper are: hep-ph
13
The categories of this paper are: quant-ph
19
The categories of this paper are: eess