Questions about PGDAttack about greatx

[EdisonLeeeee]

Hi @Leirunlin. Thank you for your interest in this repo.

1. Thank you for pointing out that. I followed the implementation from here and adjusted the code from DeepRobust. In my experiments, multiplying lr with num_budgets improves its attack performance and is even better than that of DeepRobust. So I just kept it as a better solution.
2. Agreed. PGDAttack is sensitive to lr and one should carefully tune base_lr to obtain better performance. I can provide some empirical guidance if this is needed.
3. AFAIK, MinMax is less used in literature as a comparison method. I think current implementation of PGDAttack is sufficient, which is also able to perform poisoning attacks by passing training set nodes as victim_nodes. Nevertheless, I can integrate MinMax into this repo as well.
4. Yes, this repo is designed to be completely compatible with PyG in terms of data, layers, and models. You can definitely use any PyG models as surrogate models to perform attacks as long as they are implemented in a form that accepts x, edge_index, edge_weight as input. For now, most attacks except Metattack and Nettack should support most PyG models other than GCN.

[Leirunlin]

Hi. Thanks for your detailed answer.
In my experiments, multiplying lr with num_budgets also improves the performance of CE loss, especially in the poison setting, but is relatively less useful for CW loss. Unfortunately, I didn't find literature discussing this phenomenon. It would be helpful if any advice about the choice of base_lr is provided.
Again, thanks for your efforts on this repo. I'm really looking forward to the released version.

[EdisonLeeeee]

I'll dig into that and report back. The first released version would be coming soon. BTW, the master branch is always available :D