“…Graph data analysis have attracted active research in the last decade Zhou et al, , 2010Cheng et al, 2011;Zhou and Liu, 2012;Cheng et al, 2012;Lee et al, 2013;Palanisamy et al, 2014;Su et al, 2015;Zhou et al, 2015b;Bao et al, 2015;Zhou et al, 2015d;Zhou et al, 2015a,c;Lee et al, 2015;Zhou et al, 2016;Zhou, 2017;Palanisamy et al, 2018;Zhou et al, 2018b,a;Zhou et al, 2019c,b,d;Zhou and Liu, 2019;Wu et al, , 2021aZhang et al, 2020b;Zhou et al, 2020c,a;Goswami et al, 2020;. Various adver-sarial attack models have been developed to show the vulnerability of graph learning models in node classification (Dai et al, 2018;Zügner et al, 2018;Wang and Gong, 2019;Xu et al, 2019b;Zügner and Günnemann, 2019;Takahashi, 2019;Entezari et al, 2020;Sun et al, 2020b;Zügner et al, 2020;Xi et al, 2021;He et al, 2021), community detection (Chen et al, 2017b;Waniek et al, 2018;, network embedding (Chen et al, 2018;Bojchevski and Günnemann, 2019;Chang et al, 2020), graph classification (Dai et al, 2018;Xi et al, 2021), link prediction…”