Expressivity of Graph Neural Networks Through the Lens of Adversarial Robustness
Authors:
Francesco Campi,
Lukas Gosch,
Tom Wollschläger,
Yan Scholten,
Stephan Günnemann
Abstract:
We perform the first adversarial robustness study into Graph Neural Networks (GNNs) that are provably more powerful than traditional Message Passing Neural Networks (MPNNs). In particular, we use adversarial robustness as a tool to uncover a significant gap between their theoretically possible and empirically achieved expressive power. To do so, we focus on the ability of GNNs to count specific su…
▽ More
We perform the first adversarial robustness study into Graph Neural Networks (GNNs) that are provably more powerful than traditional Message Passing Neural Networks (MPNNs). In particular, we use adversarial robustness as a tool to uncover a significant gap between their theoretically possible and empirically achieved expressive power. To do so, we focus on the ability of GNNs to count specific subgraph patterns, which is an established measure of expressivity, and extend the concept of adversarial robustness to this task. Based on this, we develop efficient adversarial attacks for subgraph counting and show that more powerful GNNs fail to generalize even to small perturbations to the graph's structure. Expanding on this, we show that such architectures also fail to count substructures on out-of-distribution graphs.
△ Less
Submitted 3 July, 2024; v1 submitted 16 August, 2023;
originally announced August 2023.
Framing image registration as a landmark detection problem for label-noise-aware task representation (HitR)
Authors:
Diana Waldmannstetter,
Ivan Ezhov,
Benedikt Wiestler,
Francesco Campi,
Ivan Kukuljan,
Stefan Ehrlich,
Shankeeth Vinayahalingam,
Bhakti Baheti,
Satrajit Chakrabarty,
Ujjwal Baid,
Spyridon Bakas,
Julian Schwarting,
Marie Metz,
Jan S. Kirschke,
Daniel Rueckert,
Rolf A. Heckemann,
Marie Piraud,
Bjoern H. Menze,
Florian Kofler
Abstract:
Accurate image registration is pivotal in biomedical image analysis, where selecting suitable registration algorithms demands careful consideration. While numerous algorithms are available, the evaluation metrics to assess their performance have remained relatively static. This study addresses this challenge by introducing a novel evaluation metric termed Landmark Hit Rate (HitR), which focuses on…
▽ More
Accurate image registration is pivotal in biomedical image analysis, where selecting suitable registration algorithms demands careful consideration. While numerous algorithms are available, the evaluation metrics to assess their performance have remained relatively static. This study addresses this challenge by introducing a novel evaluation metric termed Landmark Hit Rate (HitR), which focuses on the clinical relevance of image registration accuracy. Unlike traditional metrics such as Target Registration Error, which emphasize subresolution differences, HitR considers whether registration algorithms successfully position landmarks within defined confidence zones. This paradigm shift acknowledges the inherent annotation noise in medical images, allowing for more meaningful assessments. To equip HitR with label-noise-awareness, we propose defining these confidence zones based on an Inter-rater Variance analysis. Consequently, hit rate curves are computed for varying landmark zone sizes, enabling performance measurement for a task-specific level of accuracy. Our approach offers a more realistic and meaningful assessment of image registration algorithms, reflecting their suitability for clinical and biomedical applications.
△ Less
Submitted 1 July, 2024; v1 submitted 31 July, 2023;
originally announced August 2023.
