Review for NeurIPS paper: Towards More Practical Adversarial Attacks on Graph Neural Networks

Neural Information Processing Systems 

Weaknesses: - The theoretical foundation builds off a number of assumptions, specifically assumption 5, that may limit its applicability in real world scenarios. But there is no discussion on how this attack set is generated, its properties, or its effect on the proposed methodology.