{"total":167,"rows":[{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321,"area":"safety"},{"id":"2202.07082","title":"Graph Neural Networks for Graphs with Heterophily: A Survey","created":"2022-02-14","cited_by_count":175,"area":null},{"id":"2202.08235","title":"Data Augmentation for Deep Graph Learning: A Survey","created":"2022-02-16","cited_by_count":133,"area":null},{"id":"2102.03322","title":"CF-GNNExplainer: Counterfactual Explanations for Graph Neural Networks","created":"2021-02-05","cited_by_count":119,"area":null},{"id":"2204.08570","title":"A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability","created":"2022-04-18","cited_by_count":118,"area":null},{"id":"2202.07987","title":"Out-Of-Distribution Generalization on Graphs: A Survey","created":"2022-02-16","cited_by_count":97,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2112.08903","title":"Graph Structure Learning with Variational Information Bottleneck","created":"2021-12-16","cited_by_count":81,"area":null},{"id":"2202.08057","title":"Understanding and Improving Graph Injection Attack by Promoting Unnoticeability","created":"2022-02-16","cited_by_count":62,"area":null},{"id":"2403.04468","title":"A Survey of Graph Neural Networks in Real world: Imbalance, Noise, Privacy and OOD Challenges","created":"2024-03-07","cited_by_count":54,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2108.13049","title":"Single Node Injection Attack against Graph Neural Networks","created":"2021-08-30","cited_by_count":45,"area":null},{"id":"2103.00742","title":"Automated Machine Learning on Graphs: A Survey","created":"2021-03-01","cited_by_count":39,"area":null},{"id":"2104.07886","title":"Reinforced Neighborhood Selection Guided Multi-Relational Graph Neural Networks","created":"2021-04-16","cited_by_count":38,"area":null},{"id":"2303.09778","title":"SE-GSL: A General and Effective Graph Structure Learning Framework through Structural Entropy Optimization","created":"2023-03-17","cited_by_count":35,"area":null},{"id":"2204.12095","title":"PyGOD: A Python Library for Graph Outlier Detection","created":"2022-04-26","cited_by_count":32,"area":null},{"id":"2102.09587","title":"Interpretable Stability Bounds for Spectral Graph Filters","created":"2021-02-18","cited_by_count":28,"area":null},{"id":"2110.13957","title":"Unbiased Graph Embedding with Biased Graph Observations","created":"2021-10-26","cited_by_count":28,"area":null},{"id":"2110.15529","title":"Topological Relational Learning on Graphs","created":"2021-10-29","cited_by_count":27,"area":null},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26,"area":null},{"id":"2209.07807","title":"Model Inversion Attacks against Graph Neural Networks","created":"2022-09-16","cited_by_count":26,"area":null},{"id":"2311.13091","title":"Stable Unlearnable Example: Enhancing the Robustness of Unlearnable Examples via Stable Error-Minimizing Noise","created":"2023-11-22","cited_by_count":25,"area":null},{"id":"2411.05815","title":"Graph Neural Networks for Financial Fraud Detection: A Review","created":"2024-11-01","cited_by_count":25,"area":null},{"id":"2106.08361","title":"Adversarial Attacks on Deep Models for Financial Transaction Records","created":"2021-06-15","cited_by_count":24,"area":null},{"id":"2401.11720","title":"Graph Condensation: A Survey","created":"2024-01-22","cited_by_count":23,"area":null},{"id":"2403.07185","title":"Uncertainty in Graph Neural Networks: A Survey","created":"2024-03-11","cited_by_count":23,"area":null},{"id":"2408.08685","title":"Can Large Language Models Improve the Adversarial Robustness of Graph Neural Networks?","created":"2024-08-16","cited_by_count":23,"area":null},{"id":"2506.18019","title":"Graphs Meet AI Agents: Taxonomy, Progress, and Future Opportunities","created":"2025-06-22","cited_by_count":23,"area":"agents"},{"id":"2111.04333","title":"threaTrace: Detecting and Tracing Host-based Threats in Node Level Through Provenance Graph Learning","created":"2021-11-08","cited_by_count":22,"area":null},{"id":"2302.12977","title":"Fair Attribute Completion on Graph with Missing Attributes","created":"2023-02-25","cited_by_count":22,"area":null},{"id":"2304.14593","title":"Deep Graph Reprogramming","created":"2023-04-28","cited_by_count":22,"area":null},{"id":"2308.16375","title":"A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications","created":"2023-08-31","cited_by_count":22,"area":null},{"id":"2310.04987","title":"Data-centric Graph Learning: A Survey","created":"2023-10-08","cited_by_count":22,"area":null},{"id":"2106.07767","title":"How does Heterophily Impact the Robustness of Graph Neural Networks? Theoretical Connections and Practical Implications","created":"2021-06-14","cited_by_count":21,"area":null},{"id":"2212.04983","title":"Adversarial Weight Perturbation Improves Generalization in Graph Neural Networks","created":"2022-12-09","cited_by_count":21,"area":null},{"id":"2106.10785","title":"Adversarial Attack on Graph Neural Networks as An Influence Maximization Problem","created":"2021-06-21","cited_by_count":20,"area":null},{"id":"2204.06127","title":"Reinforcement learning on graphs: A survey","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2205.10014","title":"A Survey of Trustworthy Graph Learning: Reliability, Explainability, and Privacy Protection","created":"2022-05-20","cited_by_count":20,"area":null},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2207.09179","title":"SCARA: Scalable Graph Neural Networks with Feature-Oriented Optimization","created":"2022-07-19","cited_by_count":19,"area":null},{"id":"2112.12310","title":"Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art","created":"2021-12-23","cited_by_count":18,"area":null},{"id":"2401.00529","title":"GraphGPT: Generative Pre-trained Graph Eulerian Transformer","created":"2023-12-31","cited_by_count":17,"area":null},{"id":"2203.03762","title":"Defending Graph Convolutional Networks against Dynamic Graph Perturbations via Bayesian Self-supervision","created":"2022-03-07","cited_by_count":16,"area":null},{"id":"2104.04987","title":"AutoGL: A Library for Automated Graph Learning","created":"2021-04-11","cited_by_count":15,"area":null},{"id":"2201.12741","title":"GARNET: Reduced-Rank Topology Learning for Robust and Scalable Graph Neural Networks","created":"2022-01-30","cited_by_count":14,"area":null},{"id":"2202.12993","title":"Projective Ranking-based GNN Evasion Attacks","created":"2022-02-25","cited_by_count":14,"area":null},{"id":"2208.09779","title":"Robust Node Classification on Graphs: Jointly from Bayesian Label Transition and Topology-based Label Propagation","created":"2022-08-21","cited_by_count":12,"area":null},{"id":"2211.10896","title":"Spectral Adversarial Training for Robust Graph Neural Network","created":"2022-11-20","cited_by_count":12,"area":null},{"id":"2208.01819","title":"Adversarial Camouflage for Node Injection Attack on Graphs","created":"2022-08-03","cited_by_count":11,"area":null},{"id":"2303.16004","title":"A Survey on Malware Detection with Graph Representation Learning","created":"2023-03-28","cited_by_count":11,"area":null},{"id":"2401.03077","title":"A Topology-aware Graph Coarsening Framework for Continual Graph Learning","created":"2024-01-05","cited_by_count":11,"area":null},{"id":"2405.11034","title":"Safety in Graph Machine Learning: Threats and Safeguards","created":"2024-05-17","cited_by_count":11,"area":null},{"id":"2105.12419","title":"Adversarial Attack Framework on Graph Embedding Models with Limited Knowledge","created":"2021-05-26","cited_by_count":10,"area":null},{"id":"2202.07114","title":"Recent Advances in Reliable Deep Graph Learning: Inherent Noise, Distribution Shift, and Adversarial Attack","created":"2022-02-15","cited_by_count":10,"area":null},{"id":"2208.05514","title":"Are Gradients on Graph Structure Reliable in Gray-box Attacks?","created":"2022-08-07","cited_by_count":10,"area":null},{"id":"2210.12598","title":"GANI: Global Attacks on Graph Neural Networks via Imperceptible Node Injections","created":"2022-10-23","cited_by_count":10,"area":null},{"id":"2107.11275","title":"A Differentiable Language Model Adversarial Attack on Text Classifiers","created":"2021-07-23","cited_by_count":9,"area":null},{"id":"2201.01288","title":"Automated Graph Machine Learning: Approaches, Libraries, Benchmarks and Directions","created":"2022-01-04","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2308.10779","title":"Spear and Shield: Adversarial Attacks and Defense Methods for Model-Based Link Prediction on Continuous-Time Dynamic Graphs","created":"2023-08-21","cited_by_count":9,"area":null},{"id":"2301.00015","title":"Self-organization Preserved Graph Structure Learning with Principle of Relevant Information","created":"2022-12-30","cited_by_count":8,"area":null},{"id":"2205.03811","title":"Data-Free Adversarial Knowledge Distillation for Graph Neural Networks","created":"2022-05-08","cited_by_count":7,"area":"distill"},{"id":"2211.11312","title":"Understanding the Vulnerability of Skeleton-based Human Activity Recognition via Black-box Attack","created":"2022-11-21","cited_by_count":7,"area":null},{"id":"2304.04168","title":"Adversarially Robust Neural Architecture Search for Graph Neural Networks","created":"2023-04-09","cited_by_count":7,"area":null},{"id":"2302.14643","title":"Graph-based Knowledge Distillation: A survey and experimental evaluation","created":"2023-02-27","cited_by_count":6,"area":"distill"},{"id":"2306.13854","title":"Similarity Preserving Adversarial Graph Contrastive Learning","created":"2023-06-24","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2109.01785","title":"Node Feature Kernels Increase Graph Convolutional Network Robustness","created":"2021-09-04","cited_by_count":5,"area":null},{"id":"2111.02842","title":"Adversarial Attacks on Graph Classification via Bayesian Optimisation","created":"2021-11-04","cited_by_count":5,"area":null},{"id":"2112.13267","title":"Task and Model Agnostic Adversarial Attack on Graph Neural Networks","created":"2021-12-25","cited_by_count":5,"area":null},{"id":"2209.09688","title":"Sparse Vicious Attacks on Graph Neural Networks","created":"2022-09-20","cited_by_count":5,"area":null},{"id":"2211.04780","title":"On the Robustness of Explanations of Deep Neural Network Models: A Survey","created":"2022-11-09","cited_by_count":5,"area":null},{"id":"2308.14172","title":"A Markov Random Field model for Hypergraph-based Machine Learning","created":"2023-08-27","cited_by_count":5,"area":null},{"id":"2312.09778","title":"Hypergraph-MLP: Learning on Hypergraphs without Message Passing","created":"2023-12-15","cited_by_count":5,"area":null},{"id":"2204.06963","title":"Finding MNEMON: Reviving Memories of Node Embeddings","created":"2022-04-14","cited_by_count":4,"area":null},{"id":"2208.02435","title":"Node Copying: A Random Graph Model for Effective Graph Sampling","created":"2022-08-04","cited_by_count":4,"area":null},{"id":"2305.15792","title":"IDEA: Invariant Defense for Graph Adversarial Robustness","created":"2023-05-25","cited_by_count":4,"area":null},{"id":"2307.16361","title":"Benchmarking and Analyzing Robust Point Cloud Recognition: Bag of Tricks for Defending Adversarial Examples","created":"2023-07-31","cited_by_count":4,"area":null},{"id":"2310.13822","title":"Adversarial Attacks on Fairness of Graph Neural Networks","created":"2023-10-20","cited_by_count":4,"area":null},{"id":"2312.10903","title":"Robust Node Representation Learning via Graph Variational Diffusion Networks","created":"2023-12-18","cited_by_count":4,"area":null},{"id":"2406.10573","title":"Graph Neural Backdoor: Fundamentals, Methodologies, Applications, and Future Directions","created":"2024-06-15","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2412.18365","title":"Hypergraph Attacks via Injecting Homogeneous Nodes into Elite Hyperedges","created":"2024-12-24","cited_by_count":4,"area":null},{"id":"2507.00914","title":"Large Language Model Powered Intelligent Urban Agents: Concepts, Capabilities, and Applications","created":"2025-07-01","cited_by_count":4,"area":"agents"},{"id":"2603.26105","title":"Are LLM-Enhanced Graph Neural Networks Robust against Poisoning Attacks?","created":"2026-03-27","cited_by_count":4,"area":null},{"id":"2104.15061","title":"Black-box Gradient Attack on Graph Neural Networks: Deeper Insights in Graph-based Attack and Defense","created":"2021-04-30","cited_by_count":3,"area":null},{"id":"2111.10772","title":"Network representation learning: A macro and micro view","created":"2021-11-21","cited_by_count":3,"area":null},{"id":"2305.02901","title":"Single Node Injection Label Specificity Attack on Graph Neural Networks via Reinforcement Learning","created":"2023-05-04","cited_by_count":3,"area":null},{"id":"2307.13548","title":"Node Injection Link Stealing Attack","created":"2023-07-25","cited_by_count":3,"area":null},{"id":"2501.11568","title":"Graph Defense Diffusion Model","created":"2025-01-20","cited_by_count":3,"area":"diffusion"},{"id":"2502.05000","title":"Robust Graph Learning Against Adversarial Evasion Attacks via Prior-Free Diffusion-Based Structure Purification","created":"2025-02-07","cited_by_count":3,"area":null},{"id":"2508.04894","title":"Adversarial Attacks and Defenses on Graph-aware Large Language Models (LLMs)","created":"2025-08-06","cited_by_count":3,"area":null},{"id":"2508.19641","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","created":"2025-08-27","cited_by_count":3,"area":null},{"id":"2511.17982","title":"Towards Effective, Stealthy, and Persistent Backdoor Attacks Targeting Graph Foundation Models","created":"2025-11-22","cited_by_count":3,"area":"safety"},{"id":"2208.12815","title":"What Does the Gradient Tell When Attacking the Graph Structure","created":"2022-08-26","cited_by_count":2,"area":null},{"id":"2210.01002","title":"ASGNN: Graph Neural Networks with Adaptive Structure","created":"2022-10-03","cited_by_count":2,"area":null},{"id":"2302.08051","title":"Graph Adversarial Immunization for Certifiable Robustness","created":"2023-02-16","cited_by_count":2,"area":null},{"id":"2306.06909","title":"Graph Agent Network: Empowering Nodes with Inference Capabilities for Adversarial Resilience","created":"2023-06-12","cited_by_count":2,"area":null}],"next_cursor":"100"}