Index _ | A | B | C | D | E | F | G | I | K | L | M | N | O | P | Q | R | S | T | U | V | W | Y _ __init__() (pygip.datasets.CiteSeer method) (pygip.datasets.CoauthorCS method) (pygip.datasets.CoauthorPhysics method) (pygip.datasets.Computers method) (pygip.datasets.Cora method) (pygip.datasets.Photo method) (pygip.datasets.PubMed method) _abc_impl (pygip.models.attack.AdvMEA attribute) (pygip.models.attack.AdvMEA.AdvMEA attribute), [1] (pygip.models.attack.base.BaseAttack attribute), [1] (pygip.models.attack.CEGA attribute) (pygip.models.attack.CEGA.CEGA attribute), [1] (pygip.models.attack.DataFreeMEA.DFEAAttack attribute), [1] (pygip.models.attack.DataFreeMEA.DFEATypeI attribute), [1] (pygip.models.attack.DataFreeMEA.DFEATypeII attribute), [1] (pygip.models.attack.DataFreeMEA.DFEATypeIII attribute), [1] (pygip.models.attack.DFEATypeI attribute) (pygip.models.attack.DFEATypeII attribute) (pygip.models.attack.DFEATypeIII attribute) (pygip.models.attack.mea.MEA.ModelExtractionAttack attribute), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack0 attribute), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack1 attribute), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack2 attribute), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack3 attribute), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack4 attribute), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack5 attribute), [1] (pygip.models.attack.ModelExtractionAttack0 attribute) (pygip.models.attack.ModelExtractionAttack1 attribute) (pygip.models.attack.ModelExtractionAttack2 attribute) (pygip.models.attack.ModelExtractionAttack3 attribute) (pygip.models.attack.ModelExtractionAttack4 attribute) (pygip.models.attack.ModelExtractionAttack5 attribute) (pygip.models.attack.Realistic.RealisticAttack attribute) (pygip.models.attack.RealisticAttack attribute) (pygip.models.defense.ATOM attribute) (pygip.models.defense.atom.ATOM.ATOM attribute), [1] (pygip.models.defense.BackdoorWM attribute) (pygip.models.defense.BackdoorWM.BackdoorWM attribute), [1] (pygip.models.defense.base.BaseDefense attribute), [1] (pygip.models.defense.ImperceptibleWM attribute) (pygip.models.defense.ImperceptibleWM.ImperceptibleWM attribute), [1] (pygip.models.defense.ImperceptibleWM2 attribute) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 attribute) (pygip.models.defense.Integrity.QueryBasedVerificationDefense attribute) (pygip.models.defense.RandomWM attribute) (pygip.models.defense.RandomWM.RandomWM attribute), [1] (pygip.models.defense.SurviveWM attribute) (pygip.models.defense.SurviveWM.SurviveWM attribute), [1] (pygip.models.defense.SurviveWM2 attribute) (pygip.models.defense.SurviveWM2.SurviveWM2 attribute) (pygip.utils.metrics.AttackMetric attribute), [1] (pygip.utils.metrics.DefenseMetric attribute), [1] (pygip.utils.metrics.MetricBase attribute), [1] _apply_single_perturbation() (pygip.models.defense.Integrity.MettackHelper method) _apply_structure_attack() (pygip.models.defense.Integrity.MettackHelper method) _calculate_embedding_loss() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _calculate_generation_loss_integrated() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _calculate_imperception_loss() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _calculate_regulation_loss() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _calculate_trigger_loss() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _check_dataset_compatibility() (pygip.models.attack.base.BaseAttack method), [1] (pygip.models.defense.base.BaseDefense method), [1] _compute_accuracy() (pygip.models.defense.Integrity.MettackHelper method) _compute_attack_loss() (pygip.models.defense.Integrity.MettackHelper method) _construct_backdoor_graph() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _create_temp_trigger_graph() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _create_template_graph() (pygip.models.defense.ImperceptibleWM2.TriggerGenerator method) _create_val_mask_from_train() (pygip.models.defense.Integrity.MettackHelper method) _evaluate() (pygip.models.defense.Integrity.MettackHelper method) _evaluate_accuracy() (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) _evaluate_attack_on_watermark() (pygip.models.defense.RandomWM method) (pygip.models.defense.RandomWM.RandomWM method), [1] _evaluate_fingerprints() (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) _evaluate_model_on_graph() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _evaluate_watermark() (pygip.models.defense.RandomWM method) (pygip.models.defense.RandomWM.RandomWM method), [1] _evaluate_with_metrics() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _forward() (pygip.models.attack.DataFreeMEA.DFEAAttack method), [1] _generate_fingerprints() (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) _generate_full() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) _generate_limited() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) _generate_masks_by_classes() (pygip.datasets.Dataset method) (pygip.datasets.datasets.Dataset method) _generate_masks_by_ratio() (pygip.datasets.Dataset method) (pygip.datasets.datasets.Dataset method) _generate_trigger_graph() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _generate_watermark_graph() (pygip.models.defense.RandomWM method) (pygip.models.defense.RandomWM.RandomWM method), [1] _get_attack_class() (pygip.models.defense.RandomWM method) (pygip.models.defense.RandomWM.RandomWM method), [1] _get_avg_num_nodes() (pygip.models.defense.SurviveWM2.WatermarkGenerator method) _get_candidate_edges() (pygip.models.defense.Integrity.MettackHelper method) _get_features() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) (pygip.models.defense.Integrity.TransductiveFingerprintGenerator method) _get_num_classes() (pygip.models.defense.SurviveWM2.WatermarkGenerator method) _get_target_params() (pygip.models.defense.Integrity.BitFlipAttack method) _greedy_edge_perturbation_f() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) _greedy_edge_perturbation_l() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) _index_to_mask() (pygip.datasets.Dataset method) (pygip.datasets.datasets.Dataset method) _inner_optimization() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _load_data_and_model() (pygip.models.defense.ATOM method) (pygip.models.defense.atom.ATOM.ATOM method), [1] _load_meta_data() (pygip.datasets.Dataset method) (pygip.datasets.datasets.Dataset method) _load_model() (pygip.models.attack.AdvMEA method) (pygip.models.attack.AdvMEA.AdvMEA method), [1] (pygip.models.attack.base.BaseAttack method), [1] (pygip.models.attack.DataFreeMEA.DFEAAttack method), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack method), [1] (pygip.models.defense.BackdoorWM method) (pygip.models.defense.BackdoorWM.BackdoorWM method), [1] (pygip.models.defense.base.BaseDefense method), [1] (pygip.models.defense.ImperceptibleWM method) (pygip.models.defense.ImperceptibleWM.ImperceptibleWM method), [1] (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) (pygip.models.defense.SurviveWM method) (pygip.models.defense.SurviveWM.SurviveWM method), [1] (pygip.models.defense.SurviveWM2 method) (pygip.models.defense.SurviveWM2.SurviveWM2 method) _random_edge_addition_poisoning() (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) _retrain_poisoned_model() (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) _run_attack() (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) _select_poisoning_nodes() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) _test_on_watermark() (pygip.models.defense.RandomWM method) (pygip.models.defense.RandomWM.RandomWM method), [1] _to_cpu() (pygip.models.attack.AdvMEA method) (pygip.models.attack.AdvMEA.AdvMEA method), [1] (pygip.models.defense.SurviveWM method) (pygip.models.defense.SurviveWM.SurviveWM method), [1] _train_attack_model() (pygip.models.attack.base.BaseAttack method), [1] _train_defense_model() (pygip.models.defense.base.BaseDefense method), [1] (pygip.models.defense.ImperceptibleWM method) (pygip.models.defense.ImperceptibleWM.ImperceptibleWM method), [1] (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) (pygip.models.defense.RandomWM method) (pygip.models.defense.RandomWM.RandomWM method), [1] (pygip.models.defense.SurviveWM2 method) (pygip.models.defense.SurviveWM2.SurviveWM2 method) _train_surrogate() (pygip.models.defense.Integrity.MettackHelper method) _train_surrogate_model() (pygip.models.defense.base.BaseDefense method), [1] (pygip.models.defense.ImperceptibleWM method) (pygip.models.defense.ImperceptibleWM.ImperceptibleWM method), [1] (pygip.models.defense.SurviveWM2 method) (pygip.models.defense.SurviveWM2.SurviveWM2 method) _train_target_model() (pygip.models.attack.AdvMEA method) (pygip.models.attack.AdvMEA.AdvMEA method), [1] (pygip.models.attack.base.BaseAttack method), [1] (pygip.models.attack.DataFreeMEA.DFEAAttack method), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack method), [1] (pygip.models.defense.base.BaseDefense method), [1] (pygip.models.defense.ImperceptibleWM method) (pygip.models.defense.ImperceptibleWM.ImperceptibleWM method), [1] (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) (pygip.models.defense.RandomWM method) (pygip.models.defense.RandomWM.RandomWM method), [1] (pygip.models.defense.SurviveWM2 method) (pygip.models.defense.SurviveWM2.SurviveWM2 method) _true_bit_flip() (pygip.models.defense.Integrity.BitFlipAttack method) A accuracy() (in module pygip.models.attack.CEGA), [1] add_potential_edges() (pygip.models.attack.Realistic.RealisticAttack method) (pygip.models.attack.RealisticAttack method) AdvMEA (class in pygip.models.attack) (class in pygip.models.attack.AdvMEA), [1] algorithm_1_key_input_topology_generation() (pygip.models.defense.SurviveWM2.WatermarkGenerator method) apply() (pygip.models.defense.Integrity.BitFlipAttack method) ATOM (class in pygip.models.defense) (class in pygip.models.defense.atom.ATOM), [1] attack() (pygip.models.attack.AdvMEA method) (pygip.models.attack.AdvMEA.AdvMEA method), [1] (pygip.models.attack.base.BaseAttack method), [1] (pygip.models.attack.CEGA method) (pygip.models.attack.CEGA.CEGA method), [1] (pygip.models.attack.DataFreeMEA.DFEAAttack method), [1] (pygip.models.attack.DataFreeMEA.DFEATypeI method), [1] (pygip.models.attack.DataFreeMEA.DFEATypeII method), [1] (pygip.models.attack.DataFreeMEA.DFEATypeIII method), [1] (pygip.models.attack.DFEATypeI method) (pygip.models.attack.DFEATypeII method) (pygip.models.attack.DFEATypeIII method) (pygip.models.attack.mea.MEA.ModelExtractionAttack method), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack0 method), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack1 method), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack2 method), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack3 method), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack4 method), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack5 method), [1] (pygip.models.attack.ModelExtractionAttack0 method) (pygip.models.attack.ModelExtractionAttack1 method) (pygip.models.attack.ModelExtractionAttack2 method) (pygip.models.attack.ModelExtractionAttack3 method) (pygip.models.attack.ModelExtractionAttack4 method) (pygip.models.attack.ModelExtractionAttack5 method) (pygip.models.attack.Realistic.RealisticAttack method) (pygip.models.attack.RealisticAttack method) attack0() (in module pygip.models.attack.CEGA), [1] attack_node_fraction (pygip.models.attack.base.BaseAttack attribute), [1] AttackMetric (class in pygip.utils.metrics), [1] AttackNet (class in pygip.models.nn.backbones) aug_normalized_adjacency() (in module pygip.models.attack.CEGA), [1] aug_random_walk() (in module pygip.models.attack.CEGA), [1] average_pooling_with_neighbors() (in module pygip.models.defense.atom.ATOM), [1] average_pooling_with_neighbors_batch() (in module pygip.models.defense.atom.ATOM), [1] B BackdoorWM (class in pygip.models.defense) (class in pygip.models.defense.BackdoorWM), [1] BaseAttack (class in pygip.models.attack.base), [1] BaseDefense (class in pygip.models.defense.base), [1] bi_level_optimization() (in module pygip.models.defense.ImperceptibleWM), [1] BitFlipAttack (class in pygip.models.defense.Integrity) build_loaders() (in module pygip.models.defense.atom.ATOM), [1] C calculate_entropy() (in module pygip.models.attack.CEGA), [1] calculate_metrics() (in module pygip.models.defense.ImperceptibleWM), [1] calculate_surrogate_fidelity() (pygip.utils.GraphNeuralNetworkMetric static method), [1] (pygip.utils.metrics.GraphNeuralNetworkMetric static method), [1] CEGA (class in pygip.models.attack) (class in pygip.models.attack.CEGA), [1] CiteSeer (class in pygip.datasets), [1] (class in pygip.datasets.datasets) clear() (pygip.models.defense.atom.ATOM.Memory method), [1] CoauthorCS (class in pygip.datasets), [1] (class in pygip.datasets.datasets) CoauthorPhysics (class in pygip.datasets), [1] (class in pygip.datasets.datasets) Collab (class in pygip.datasets.datasets) collate_fn_no_pad() (in module pygip.models.defense.atom.ATOM), [1] combine_with_trigger() (pygip.models.defense.SurviveWM method) (pygip.models.defense.SurviveWM.SurviveWM method), [1] ComputationMetric (class in pygip.utils.metrics), [1] compute() (pygip.utils.metrics.AttackMetric method), [1] (pygip.utils.metrics.DefenseMetric method), [1] (pygip.utils.metrics.MetricBase method), [1] compute_auc() (pygip.utils.metrics.MetricBase static method), [1] compute_cosine_similarity() (pygip.models.attack.Realistic.RealisticAttack method) (pygip.models.attack.RealisticAttack method) compute_default_metrics() (pygip.utils.metrics.MetricBase static method), [1] compute_distance() (in module pygip.models.attack.CEGA), [1] compute_embedding_batch() (in module pygip.models.defense.atom.ATOM), [1] compute_fidelity() (pygip.utils.metrics.MetricBase static method), [1] compute_fingerprint_score() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) compute_fingerprint_scores_full() (pygip.models.defense.Integrity.TransductiveFingerprintGenerator method) compute_fingerprint_scores_limited() (pygip.models.defense.Integrity.TransductiveFingerprintGenerator method) compute_metrics() (pygip.models.defense.SurviveWM method) (pygip.models.defense.SurviveWM.SurviveWM method), [1] compute_rank() (in module pygip.models.attack.CEGA), [1] compute_returns_and_advantages() (in module pygip.models.defense.atom.ATOM), [1] Computers (class in pygip.datasets), [1] (class in pygip.datasets.datasets) convert_pyg_to_dgl() (in module pygip.models.attack.CEGA), [1] Cora (class in pygip.datasets), [1] (class in pygip.datasets.datasets) custom_reward_function() (in module pygip.models.defense.atom.ATOM), [1] D Dataset (class in pygip.datasets) (class in pygip.datasets.datasets) dataset (pygip.models.attack.base.BaseAttack attribute), [1] defend() (pygip.models.defense.ATOM method) (pygip.models.defense.atom.ATOM.ATOM method), [1] (pygip.models.defense.BackdoorWM method) (pygip.models.defense.BackdoorWM.BackdoorWM method), [1] (pygip.models.defense.base.BaseDefense method), [1] (pygip.models.defense.ImperceptibleWM method) (pygip.models.defense.ImperceptibleWM.ImperceptibleWM method), [1] (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) (pygip.models.defense.RandomWM method) (pygip.models.defense.RandomWM.RandomWM method), [1] (pygip.models.defense.SurviveWM method) (pygip.models.defense.SurviveWM.SurviveWM method), [1] (pygip.models.defense.SurviveWM2 method) (pygip.models.defense.SurviveWM2.SurviveWM2 method) DefenseMetric (class in pygip.utils.metrics), [1] device (pygip.models.attack.base.BaseAttack attribute), [1] DFEAAttack (class in pygip.models.attack.DataFreeMEA), [1] DFEATypeI (class in pygip.models.attack) (class in pygip.models.attack.DataFreeMEA), [1] DFEATypeII (class in pygip.models.attack) (class in pygip.models.attack.DataFreeMEA), [1] DFEATypeIII (class in pygip.models.attack) (class in pygip.models.attack.DataFreeMEA), [1] dgl_to_pyg_data() (in module pygip.utils.dglTopyg), [1] dgl_to_tg() (in module pygip.datasets.datasets) DGLEdgePredictor (class in pygip.models.attack.Realistic) DGLSurrogateModel (class in pygip.models.attack.Realistic) E ENZYMES (class in pygip.datasets.datasets) evaluate() (in module pygip.models.attack.CEGA), [1] (pygip.models.attack.DataFreeMEA.DFEAAttack method), [1] (pygip.utils.GraphNeuralNetworkMetric method), [1] (pygip.utils.metrics.GraphNeuralNetworkMetric method), [1] evaluate_attack() (pygip.models.attack.Realistic.RealisticAttack method) (pygip.models.attack.RealisticAttack method) evaluate_clean_accuracy() (in module pygip.models.defense.SurviveWM2) evaluate_helper() (pygip.utils.GraphNeuralNetworkMetric method), [1] (pygip.utils.metrics.GraphNeuralNetworkMetric method), [1] evaluate_model() (pygip.models.defense.BackdoorWM method) (pygip.models.defense.BackdoorWM.BackdoorWM method), [1] evaluate_surrogate_extraction() (pygip.utils.GraphNeuralNetworkMetric static method), [1] (pygip.utils.metrics.GraphNeuralNetworkMetric static method), [1] evaluate_watermark_effectiveness() (in module pygip.models.defense.SurviveWM2) F Facebook (class in pygip.datasets.datasets) find_short_dist() (in module pygip.models.attack.CEGA), [1] Flickr (class in pygip.datasets.datasets) forward() (pygip.models.attack.CEGA.GCN_drop method), [1] (pygip.models.attack.CEGA.GcnNet method), [1] (pygip.models.attack.Realistic.DGLEdgePredictor method) (pygip.models.attack.Realistic.DGLSurrogateModel method) (pygip.models.defense.atom.ATOM.FusionGRU method), [1] (pygip.models.defense.atom.ATOM.GCN method), [1] (pygip.models.defense.atom.ATOM.PolicyNetwork method), [1] (pygip.models.defense.atom.ATOM.StateTransformMLP method), [1] (pygip.models.defense.ImperceptibleWM.TriggerGenerator method), [1] (pygip.models.defense.ImperceptibleWM2.TriggerGenerator method) (pygip.models.defense.SurviveWM2.SAGEModel method) (pygip.models.defense.SurviveWM2.SNNLLoss method) (pygip.models.nn.backbones.AttackNet method) (pygip.models.nn.backbones.GAT method) (pygip.models.nn.backbones.GCN method) (pygip.models.nn.backbones.GCN_PyG method) (pygip.models.nn.backbones.GraphSAGE method) (pygip.models.nn.backbones.ShadowNet method) FusionGRU (class in pygip.models.defense.atom.ATOM), [1] G GAT (class in pygip.models.nn.backbones) GCN (class in pygip.models.defense.atom.ATOM), [1] (class in pygip.models.nn.backbones) GCN_drop (class in pygip.models.attack.CEGA), [1] GCN_PyG (class in pygip.models.nn.backbones) GcnNet (class in pygip.models.attack.CEGA), [1] generate() (pygip.models.attack.DataFreeMEA.GraphGenerator method), [1] generate_candidate_edges() (pygip.models.attack.Realistic.RealisticAttack method) (pygip.models.attack.RealisticAttack method) generate_fingerprint_nodes() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) generate_fingerprints() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) (pygip.models.defense.Integrity.TransductiveFingerprintGenerator method) generate_key_graph() (pygip.models.defense.SurviveWM method) (pygip.models.defense.SurviveWM.SurviveWM method), [1] generate_trigger_graph() (in module pygip.models.defense.ImperceptibleWM), [1] generate_watermark_set_with_clean_model() (pygip.models.defense.SurviveWM2.WatermarkGenerator method) get_candidate_nodes() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) (pygip.models.defense.Integrity.TransductiveFingerprintGenerator method) get_current_neighbors_1() (in module pygip.models.attack.CEGA), [1] get_current_neighbors_dense() (in module pygip.models.attack.CEGA), [1] get_device() (in module pygip.utils.hardware), [1] get_embedding() (pygip.models.defense.atom.ATOM.TargetGCN method), [1] get_entropy_contribute() (in module pygip.models.attack.CEGA), [1] get_max_info_entropy_node_set() (in module pygip.models.attack.CEGA), [1] get_max_nnd_node_dense() (in module pygip.models.attack.CEGA), [1] get_name() (pygip.datasets.Dataset method) (pygip.datasets.datasets.Dataset method) get_node_embedding() (in module pygip.models.defense.atom.ATOM), [1] get_nonzero_indices() (pygip.models.attack.mea.MEA.ModelExtractionAttack0 method), [1] (pygip.models.attack.ModelExtractionAttack0 method) get_one_hop_neighbors() (in module pygip.models.defense.atom.ATOM), [1] get_receptive_fields_dense() (in module pygip.models.attack.CEGA), [1] graph_data (pygip.models.attack.base.BaseAttack attribute), [1] graph_dataset (pygip.models.attack.base.BaseAttack attribute), [1] GraphGenerator (class in pygip.models.attack.DataFreeMEA), [1] GraphNeuralNetworkMetric (class in pygip.utils), [1] (class in pygip.utils.metrics), [1] GraphSAGE (class in pygip.models.nn.backbones) greedy_edge_perturbation() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) greedy_perturb_fingerprints() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) I IMDB (class in pygip.datasets.datasets) ImperceptibleWM (class in pygip.models.defense) (class in pygip.models.defense.ImperceptibleWM), [1] ImperceptibleWM2 (class in pygip.models.defense) (class in pygip.models.defense.ImperceptibleWM2) InductiveFingerprintGenerator (class in pygip.models.defense.Integrity) init_mask() (in module pygip.models.attack.CEGA), [1] inject_backdoor_trigger() (pygip.models.defense.BackdoorWM method) (pygip.models.defense.BackdoorWM.BackdoorWM method), [1] K k_core_decomposition() (in module pygip.models.defense.atom.ATOM), [1] KeyInputOptimizer (class in pygip.models.defense.SurviveWM2) L LastFM (class in pygip.datasets.datasets) load_data() (in module pygip.models.attack.CEGA), [1] load_data_and_model() (in module pygip.models.defense.atom.ATOM), [1] load_data_from_grain() (in module pygip.models.attack.CEGA), [1] load_dgl_data() (pygip.datasets.CiteSeer method), [1] (pygip.datasets.CoauthorCS method), [1] (pygip.datasets.CoauthorPhysics method), [1] (pygip.datasets.Computers method), [1] (pygip.datasets.Cora method), [1] (pygip.datasets.Dataset method) (pygip.datasets.datasets.CiteSeer method) (pygip.datasets.datasets.CoauthorCS method) (pygip.datasets.datasets.CoauthorPhysics method) (pygip.datasets.datasets.Collab method) (pygip.datasets.datasets.Computers method) (pygip.datasets.datasets.Cora method) (pygip.datasets.datasets.Dataset method) (pygip.datasets.datasets.Flickr method) (pygip.datasets.datasets.IMDB method) (pygip.datasets.datasets.MUTAG method) (pygip.datasets.datasets.NCI1 method) (pygip.datasets.datasets.Photo method) (pygip.datasets.datasets.PROTEINS method) (pygip.datasets.datasets.PTC method) (pygip.datasets.datasets.PubMed method) (pygip.datasets.datasets.Reddit method) (pygip.datasets.datasets.Twitter method) (pygip.datasets.datasets.YelpData method) (pygip.datasets.Photo method), [1] (pygip.datasets.PubMed method), [1] load_pyg_data() (pygip.datasets.CiteSeer method), [1] (pygip.datasets.CoauthorCS method), [1] (pygip.datasets.CoauthorPhysics method), [1] (pygip.datasets.Computers method), [1] (pygip.datasets.Cora method), [1] (pygip.datasets.Dataset method) (pygip.datasets.datasets.CiteSeer method) (pygip.datasets.datasets.CoauthorCS method) (pygip.datasets.datasets.CoauthorPhysics method) (pygip.datasets.datasets.Computers method) (pygip.datasets.datasets.Cora method) (pygip.datasets.datasets.Dataset method) (pygip.datasets.datasets.ENZYMES method) (pygip.datasets.datasets.Facebook method) (pygip.datasets.datasets.Flickr method) (pygip.datasets.datasets.LastFM method) (pygip.datasets.datasets.Photo method) (pygip.datasets.datasets.PolBlogs method) (pygip.datasets.datasets.PubMed method) (pygip.datasets.datasets.Reddit method) (pygip.datasets.Photo method), [1] (pygip.datasets.PubMed method), [1] M Memory (class in pygip.models.defense.atom.ATOM), [1] MetricBase (class in pygip.utils.metrics), [1] MettackHelper (class in pygip.models.defense.Integrity) model_path (pygip.models.attack.base.BaseAttack attribute), [1] ModelExtractionAttack (class in pygip.models.attack.mea.MEA), [1] ModelExtractionAttack0 (class in pygip.models.attack) (class in pygip.models.attack.mea.MEA), [1] ModelExtractionAttack1 (class in pygip.models.attack) (class in pygip.models.attack.mea.MEA), [1] ModelExtractionAttack2 (class in pygip.models.attack) (class in pygip.models.attack.mea.MEA), [1] ModelExtractionAttack3 (class in pygip.models.attack) (class in pygip.models.attack.mea.MEA), [1] ModelExtractionAttack4 (class in pygip.models.attack) (class in pygip.models.attack.mea.MEA), [1] ModelExtractionAttack5 (class in pygip.models.attack) (class in pygip.models.attack.mea.MEA), [1] module pygip pygip.datasets pygip.datasets.datasets pygip.models pygip.models.attack pygip.models.attack.AdvMEA, [1] pygip.models.attack.base, [1] pygip.models.attack.CEGA, [1] pygip.models.attack.DataFreeMEA, [1] pygip.models.attack.mea pygip.models.attack.mea.MEA, [1] pygip.models.attack.Realistic pygip.models.defense pygip.models.defense.atom pygip.models.defense.atom.ATOM, [1] pygip.models.defense.BackdoorWM, [1] pygip.models.defense.base, [1] pygip.models.defense.ImperceptibleWM, [1] pygip.models.defense.ImperceptibleWM2 pygip.models.defense.Integrity pygip.models.defense.RandomWM, [1] pygip.models.defense.SurviveWM, [1] pygip.models.defense.SurviveWM2 pygip.models.nn pygip.models.nn.backbones pygip.utils, [1] pygip.utils.dglTopyg, [1] pygip.utils.hardware, [1] pygip.utils.metrics, [1] MUTAG (class in pygip.datasets.datasets) N NCI1 (class in pygip.datasets.datasets) normalize() (in module pygip.models.attack.CEGA), [1] num_classes (pygip.models.attack.base.BaseAttack attribute), [1] num_features (pygip.models.attack.base.BaseAttack attribute), [1] num_nodes (pygip.models.attack.base.BaseAttack attribute), [1] O optimize() (pygip.models.defense.SurviveWM2.KeyInputOptimizer method) P page_rank() (in module pygip.models.attack.CEGA), [1] parse_index_file() (in module pygip.models.attack.CEGA), [1] perturb_avg() (in module pygip.models.attack.CEGA), [1] perturb_features() (in module pygip.models.attack.CEGA), [1] Photo (class in pygip.datasets), [1] (class in pygip.datasets.datasets) PolBlogs (class in pygip.datasets.datasets) PolicyNetwork (class in pygip.models.defense.atom.ATOM), [1] PPOAgent (class in pygip.models.defense.atom.ATOM), [1] precompute_all_node_embeddings() (in module pygip.models.defense.atom.ATOM), [1] precompute_simple_embeddings() (in module pygip.models.defense.atom.ATOM), [1] predict() (pygip.models.defense.atom.ATOM.TargetGCN method), [1] predict_edges() (pygip.models.attack.Realistic.DGLEdgePredictor method) preprocess_sequences() (in module pygip.models.defense.atom.ATOM), [1] print() (pygip.utils.metrics.MetricBase method), [1] process_sequence() (pygip.models.defense.atom.ATOM.FusionGRU method), [1] PROTEINS (class in pygip.datasets.datasets) PTC (class in pygip.datasets.datasets) PubMed (class in pygip.datasets), [1] (class in pygip.datasets.datasets) pygip module pygip.datasets module pygip.datasets.datasets module pygip.models module pygip.models.attack module pygip.models.attack.AdvMEA module, [1] pygip.models.attack.base module, [1] pygip.models.attack.CEGA module, [1] pygip.models.attack.DataFreeMEA module, [1] pygip.models.attack.mea module pygip.models.attack.mea.MEA module, [1] pygip.models.attack.Realistic module pygip.models.defense module pygip.models.defense.atom module pygip.models.defense.atom.ATOM module, [1] pygip.models.defense.BackdoorWM module, [1] pygip.models.defense.base module, [1] pygip.models.defense.ImperceptibleWM module, [1] pygip.models.defense.ImperceptibleWM2 module pygip.models.defense.Integrity module pygip.models.defense.RandomWM module, [1] pygip.models.defense.SurviveWM module, [1] pygip.models.defense.SurviveWM2 module pygip.models.nn module pygip.models.nn.backbones module pygip.utils module, [1] pygip.utils.dglTopyg module, [1] pygip.utils.hardware module, [1] pygip.utils.metrics module, [1] Q quantile_selection() (in module pygip.models.attack.CEGA), [1] QueryBasedVerificationDefense (class in pygip.models.defense.Integrity) R RandomWM (class in pygip.models.defense) (class in pygip.models.defense.RandomWM), [1] rank_centrality() (in module pygip.models.attack.CEGA), [1] rank_cluster() (in module pygip.models.attack.CEGA), [1] rank_density() (in module pygip.models.attack.CEGA), [1] rank_diversity() (in module pygip.models.attack.CEGA), [1] rank_entropy() (in module pygip.models.attack.CEGA), [1] rank_perturb() (in module pygip.models.attack.CEGA), [1] RealisticAttack (class in pygip.models.attack) (class in pygip.models.attack.Realistic) Reddit (class in pygip.datasets.datasets) reset() (pygip.utils.metrics.MetricBase method), [1] run() (pygip.models.defense.Integrity.MettackHelper method) run_full_pipeline() (pygip.models.defense.Integrity.QueryBasedVerificationDefense method) S SAGEModel (class in pygip.models.defense.SurviveWM2) save_fingerprint_tuples() (pygip.models.defense.Integrity.InductiveFingerprintGenerator method) select_action() (pygip.models.defense.atom.ATOM.PPOAgent method), [1] select_top_fingerprints() (pygip.models.defense.Integrity.TransductiveFingerprintGenerator method) SequencesDataset (class in pygip.models.defense.atom.ATOM), [1] set_device() (in module pygip.utils.hardware), [1] set_seed() (in module pygip.models.attack.CEGA), [1] (in module pygip.models.defense.atom.ATOM), [1] ShadowNet (class in pygip.models.nn.backbones) simple_embedding_batch() (in module pygip.models.defense.atom.ATOM), [1] simulate_target_model_queries() (pygip.models.attack.Realistic.RealisticAttack method) (pygip.models.attack.RealisticAttack method) snn_loss() (pygip.models.defense.SurviveWM method) (pygip.models.defense.SurviveWM.SurviveWM method), [1] SNNLLoss (class in pygip.models.defense.SurviveWM2) sparse_mx_to_torch_sparse_tensor() (in module pygip.models.attack.CEGA), [1] split_and_adjust() (in module pygip.models.defense.atom.ATOM), [1] StateTransformMLP (class in pygip.models.defense.atom.ATOM), [1] store() (pygip.models.defense.atom.ATOM.Memory method), [1] supported_api_types (pygip.models.attack.AdvMEA attribute) (pygip.models.attack.AdvMEA.AdvMEA attribute), [1] (pygip.models.attack.base.BaseAttack attribute), [1], [2], [3] (pygip.models.attack.CEGA attribute) (pygip.models.attack.CEGA.CEGA attribute), [1] (pygip.models.attack.DataFreeMEA.DFEAAttack attribute), [1] (pygip.models.attack.mea.MEA.ModelExtractionAttack attribute), [1] (pygip.models.attack.Realistic.RealisticAttack attribute) (pygip.models.attack.RealisticAttack attribute) (pygip.models.defense.ATOM attribute) (pygip.models.defense.atom.ATOM.ATOM attribute), [1] (pygip.models.defense.BackdoorWM attribute) (pygip.models.defense.BackdoorWM.BackdoorWM attribute), [1] (pygip.models.defense.base.BaseDefense attribute), [1] (pygip.models.defense.ImperceptibleWM attribute) (pygip.models.defense.ImperceptibleWM.ImperceptibleWM attribute), [1] (pygip.models.defense.Integrity.QueryBasedVerificationDefense attribute) (pygip.models.defense.RandomWM attribute) (pygip.models.defense.RandomWM.RandomWM attribute), [1] (pygip.models.defense.SurviveWM attribute) (pygip.models.defense.SurviveWM.SurviveWM attribute), [1] supported_datasets (pygip.models.attack.base.BaseAttack attribute), [1], [2], [3] (pygip.models.attack.mea.MEA.ModelExtractionAttack attribute), [1] (pygip.models.attack.Realistic.RealisticAttack attribute) (pygip.models.attack.RealisticAttack attribute) (pygip.models.defense.ATOM attribute) (pygip.models.defense.atom.ATOM.ATOM attribute), [1] (pygip.models.defense.base.BaseDefense attribute), [1] (pygip.models.defense.Integrity.QueryBasedVerificationDefense attribute) SurviveWM (class in pygip.models.defense) (class in pygip.models.defense.SurviveWM), [1] SurviveWM2 (class in pygip.models.defense) (class in pygip.models.defense.SurviveWM2) T TargetGCN (class in pygip.models.defense.atom.ATOM), [1] test_model() (in module pygip.models.defense.atom.ATOM), [1] tg_to_dgl() (in module pygip.datasets.datasets) train_clean_model() (in module pygip.models.defense.SurviveWM2) train_edge_predictor() (pygip.models.attack.Realistic.RealisticAttack method) (pygip.models.attack.RealisticAttack method) train_gcn() (in module pygip.models.defense.atom.ATOM), [1] train_surrogate_model() (pygip.models.attack.Realistic.RealisticAttack method) (pygip.models.attack.RealisticAttack method) train_target_model() (pygip.models.defense.BackdoorWM method) (pygip.models.defense.BackdoorWM.BackdoorWM method), [1] train_watermarked_model_full() (in module pygip.models.defense.SurviveWM2) train_with_snnl() (pygip.models.defense.SurviveWM method) (pygip.models.defense.SurviveWM.SurviveWM method), [1] TransductiveFingerprintGenerator (class in pygip.models.defense.Integrity) TriggerGenerator (class in pygip.models.defense.ImperceptibleWM), [1] (class in pygip.models.defense.ImperceptibleWM2) Twitter (class in pygip.datasets.datasets) U update() (pygip.models.defense.atom.ATOM.PPOAgent method), [1] (pygip.utils.metrics.AttackMetric method), [1] (pygip.utils.metrics.ComputationMetric method), [1] (pygip.utils.metrics.DefenseMetric method), [1] (pygip.utils.metrics.MetricBase method), [1] update_defense_task() (pygip.utils.metrics.DefenseMetric method), [1] update_defense_wm() (pygip.utils.metrics.DefenseMetric method), [1] update_sub_train_mask() (in module pygip.models.attack.CEGA), [1] update_surrogate_task() (pygip.utils.metrics.DefenseMetric method), [1] update_surrogate_wm() (pygip.utils.metrics.DefenseMetric method), [1] update_target() (pygip.utils.metrics.DefenseMetric method), [1] V verify_backdoor() (pygip.models.defense.BackdoorWM method) (pygip.models.defense.BackdoorWM.BackdoorWM method), [1] verify_ownership() (pygip.models.defense.ImperceptibleWM2 method) (pygip.models.defense.ImperceptibleWM2.ImperceptibleWM2 method) verify_watermark() (pygip.models.defense.SurviveWM method) (pygip.models.defense.SurviveWM.SurviveWM method), [1] W WatermarkGenerator (class in pygip.models.defense.SurviveWM2) Y YelpData (class in pygip.datasets.datasets)