Feature-Based Graph Backdoor Attack in the Node Classification Task

Figure 2

Smoothed distribution of poisoned nodes and their neighboring nodes features in CiteSeer when the trigger size is 0.05 and the data poisoning rate is 0.1.