{"total":53,"rows":[{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2108.13049","title":"Single Node Injection Attack against Graph Neural Networks","created":"2021-08-30","cited_by_count":45,"area":null},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2308.05034","title":"Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance","created":"2023-08-09","cited_by_count":31,"area":null},{"id":"2108.09513","title":"A Hard Label Black-box Adversarial Attack Against Graph Neural Networks","created":"2021-08-21","cited_by_count":26,"area":null},{"id":"2209.07807","title":"Model Inversion Attacks against Graph Neural Networks","created":"2022-09-16","cited_by_count":26,"area":null},{"id":"2111.04333","title":"threaTrace: Detecting and Tracing Host-based Threats in Node Level Through Provenance Graph Learning","created":"2021-11-08","cited_by_count":22,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2211.10782","title":"Let Graph be the Go Board: Gradient-free Node Injection Attack for Graph Neural Networks via Reinforcement Learning","created":"2022-11-19","cited_by_count":19,"area":null},{"id":"2108.03388","title":"Jointly Attacking Graph Neural Network and its Explanations","created":"2021-08-07","cited_by_count":18,"area":null},{"id":"2111.00684","title":"Graph Structural Attack by Perturbing Spectral Distance","created":"2021-11-01","cited_by_count":16,"area":null},{"id":"2206.01379","title":"Instant Graph Neural Networks for Dynamic Graphs","created":"2022-06-03","cited_by_count":16,"area":null},{"id":"2206.14724","title":"Private Graph Extraction via Feature Explanations","created":"2022-06-29","cited_by_count":16,"area":null},{"id":"2106.11865","title":"NetFense: Adversarial Defenses against Privacy Attacks on Neural Networks for Graph Data","created":"2021-06-22","cited_by_count":13,"area":null},{"id":"2209.05957","title":"Adversarial Inter-Group Link Injection Degrades the Fairness of Graph Neural Networks","created":"2022-09-13","cited_by_count":12,"area":null},{"id":"2405.11034","title":"Safety in Graph Machine Learning: Threats and Safeguards","created":"2024-05-17","cited_by_count":11,"area":null},{"id":"2205.03546","title":"Bandits for Structure Perturbation-based Black-box Attacks to Graph Neural Networks with Theoretical Guarantees","created":"2022-05-07","cited_by_count":9,"area":null},{"id":"2407.09378","title":"Graph Neural Network Causal Explanation via Neural Causal Models","created":"2024-07-12","cited_by_count":9,"area":null},{"id":"2306.00578","title":"Does Black-box Attribute Inference Attacks on Graph Neural Networks Constitute Privacy Risk?","created":"2023-06-01","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2401.09945","title":"HGAttack: Transferable Heterogeneous Graph Adversarial Attack","created":"2024-01-18","cited_by_count":6,"area":null},{"id":"2112.13267","title":"Task and Model Agnostic Adversarial Attack on Graph Neural Networks","created":"2021-12-25","cited_by_count":5,"area":null},{"id":"2305.02383","title":"On the Security Risks of Knowledge Graph Reasoning","created":"2023-05-03","cited_by_count":5,"area":null},{"id":"2405.15564","title":"Rethinking Independent Cross-Entropy Loss For Graph-Structured Data","created":"2024-05-24","cited_by_count":5,"area":null},{"id":"2110.10482","title":"Surrogate Representation Learning with Isometric Mapping for Gray-box Graph Adversarial Attacks","created":"2021-10-20","cited_by_count":4,"area":null},{"id":"2310.13822","title":"Adversarial Attacks on Fairness of Graph Neural Networks","created":"2023-10-20","cited_by_count":4,"area":null},{"id":"2301.01731","title":"GUAP: Graph Universal Attack Through Adversarial Patching","created":"2023-01-04","cited_by_count":3,"area":null},{"id":"2405.05784","title":"Link Stealing Attacks Against Inductive Graph Neural Networks","created":"2024-05-09","cited_by_count":3,"area":null},{"id":"2411.12775","title":"Revisiting Fake News Detection: Towards Temporality-aware Evaluation by Leveraging Engagement Earliness","created":"2024-11-19","cited_by_count":3,"area":null},{"id":"2412.13134","title":"Practicable Black-box Evasion Attacks on Link Prediction in Dynamic Graphs -- A Graph Sequential Embedding Method","created":"2024-12-17","cited_by_count":3,"area":null},{"id":"2501.05614","title":"Watermarking Graph Neural Networks via Explanations for Ownership Protection","created":"2025-01-09","cited_by_count":3,"area":null},{"id":"2503.06340","title":"Backdoor Attacks on Discrete Graph Diffusion Models","created":"2025-03-08","cited_by_count":3,"area":"diffusion"},{"id":"2210.01002","title":"ASGNN: Graph Neural Networks with Adaptive Structure","created":"2022-10-03","cited_by_count":2,"area":null},{"id":"2302.08051","title":"Graph Adversarial Immunization for Certifiable Robustness","created":"2023-02-16","cited_by_count":2,"area":null},{"id":"2307.14387","title":"Coupled-Space Attacks against Random-Walk-based Anomaly Detection","created":"2023-07-26","cited_by_count":2,"area":null},{"id":"2308.15614","title":"Everything Perturbed All at Once: Enabling Differentiable Graph Attacks","created":"2023-08-29","cited_by_count":2,"area":null},{"id":"2403.07943","title":"Revisiting Edge Perturbation for Graph Neural Network in Graph Data Augmentation and Attack","created":"2024-03-10","cited_by_count":2,"area":null},{"id":"2503.18503","title":"Deterministic Certification of Graph Neural Networks against Graph Poisoning Attacks with Arbitrary Perturbations","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2112.06276","title":"Quantifying and Understanding Adversarial Examples in Discrete Input Spaces","created":"2021-12-12","cited_by_count":1,"area":null},{"id":"2312.07158","title":"Cost Aware Untargeted Poisoning Attack against Graph Neural Networks,","created":"2023-12-12","cited_by_count":1,"area":null},{"id":"2406.13920","title":"Understanding the Robustness of Graph Neural Networks against Adversarial Attacks","created":"2024-06-20","cited_by_count":1,"area":null},{"id":"2407.18170","title":"RIDA: A Robust Attack Framework on Incomplete Graphs","created":"2024-07-25","cited_by_count":1,"area":null},{"id":"2505.12019","title":"FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients","created":"2025-05-17","cited_by_count":1,"area":null},{"id":"2505.14463","title":"Adverseness vs. Equilibrium: Exploring Graph Adversarial Resilience through Dynamic Equilibrium","created":"2025-05-20","cited_by_count":1,"area":null},{"id":"2512.20004","title":"IoT-based Android Malware Detection Using Graph Neural Network With Adversarial Defense","created":"2025-12-23","cited_by_count":1,"area":null},{"id":"2202.09389","title":"Black-box Node Injection Attack for Graph Neural Networks","created":"2022-02-18","cited_by_count":0,"area":null},{"id":"2405.08645","title":"Certifying Robustness of Graph Convolutional Networks for Node Perturbation with Polyhedra Abstract Interpretation","created":"2024-05-14","cited_by_count":0,"area":null},{"id":"2510.07109","title":"GNN-enhanced Traffic Anomaly Detection for Next-Generation SDN-Enabled Consumer Electronics","created":"2025-10-08","cited_by_count":0,"area":null},{"id":"2601.00229","title":"Robust Graph Fine-Tuning with Adversarial Graph Prompting","created":"2026-01-01","cited_by_count":0,"area":null},{"id":"2603.21155","title":"Can LLMs Fool Graph Learning? Exploring Universal Adversarial Attacks on Text-Attributed Graphs","created":"2026-03-22","cited_by_count":0,"area":null},{"id":"2604.15370","title":"TopFeaRe: Locating Critical State of Adversarial Resilience for Graphs Regarding Topology-Feature Entanglement","created":"2026-04-15","cited_by_count":0,"area":null}],"next_cursor":null}