{"total":68,"rows":[{"id":"2204.08570","title":"A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability","created":"2022-04-18","cited_by_count":118,"area":null},{"id":"2202.08057","title":"Understanding and Improving Graph Injection Attack by Promoting Unnoticeability","created":"2022-02-16","cited_by_count":62,"area":null},{"id":"2303.01263","title":"Unnoticeable Backdoor Attacks on Graph Neural Networks","created":"2023-02-11","cited_by_count":45,"area":null},{"id":"2210.00643","title":"Spectral Augmentation for Self-Supervised Learning on Graphs","created":"2022-10-02","cited_by_count":39,"area":null},{"id":"2303.14859","title":"Mind the Label Shift of Augmentation-based Graph OOD Generalization","created":"2023-03-27","cited_by_count":34,"area":null},{"id":"2103.11155","title":"Recognizing Predictive Substructures with Subgraph Information Bottleneck","created":"2021-03-20","cited_by_count":28,"area":null},{"id":"2502.12586","title":"G-Refer: Graph Retrieval-Augmented Large Language Model for Explainable Recommendation","created":"2025-02-18","cited_by_count":27,"area":"rag"},{"id":"2108.09513","title":"A Hard Label Black-box Adversarial Attack Against Graph Neural Networks","created":"2021-08-21","cited_by_count":26,"area":null},{"id":"2209.07807","title":"Model Inversion Attacks against Graph Neural Networks","created":"2022-09-16","cited_by_count":26,"area":null},{"id":"2106.07767","title":"How does Heterophily Impact the Robustness of Graph Neural Networks? Theoretical Connections and Practical Implications","created":"2021-06-14","cited_by_count":21,"area":null},{"id":"2106.10785","title":"Adversarial Attack on Graph Neural Networks as An Influence Maximization Problem","created":"2021-06-21","cited_by_count":20,"area":null},{"id":"2205.10014","title":"A Survey of Trustworthy Graph Learning: Reliability, Explainability, and Privacy Protection","created":"2022-05-20","cited_by_count":20,"area":null},{"id":"2108.03388","title":"Jointly Attacking Graph Neural Network and its Explanations","created":"2021-08-07","cited_by_count":18,"area":null},{"id":"2110.06468","title":"Graph-Fraudster: Adversarial Attacks on Graph Neural Network Based Vertical Federated Learning","created":"2021-10-13","cited_by_count":17,"area":null},{"id":"2111.00684","title":"Graph Structural Attack by Perturbing Spectral Distance","created":"2021-11-01","cited_by_count":16,"area":null},{"id":"2304.00010","title":"Towards Reasonable Budget Allocation in Untargeted Graph Structure Attacks via Gradient Debias","created":"2023-03-29","cited_by_count":16,"area":null},{"id":"2302.13083","title":"Knowledge Graph Completion with Counterfactual Augmentation","created":"2023-02-25","cited_by_count":13,"area":null},{"id":"2401.02290","title":"Path-based Explanation for Knowledge Graph Completion","created":"2024-01-04","cited_by_count":11,"area":null},{"id":"2405.11034","title":"Safety in Graph Machine Learning: Threats and Safeguards","created":"2024-05-17","cited_by_count":11,"area":null},{"id":"2407.12068","title":"Learning on Graphs with Large Language Models(LLMs): A Deep Dive into Model Robustness","created":"2024-07-16","cited_by_count":11,"area":null},{"id":"2105.12419","title":"Adversarial Attack Framework on Graph Embedding Models with Limited Knowledge","created":"2021-05-26","cited_by_count":10,"area":null},{"id":"2202.07114","title":"Recent Advances in Reliable Deep Graph Learning: Inherent Noise, Distribution Shift, and Adversarial Attack","created":"2022-02-15","cited_by_count":10,"area":null},{"id":"2205.03546","title":"Bandits for Structure Perturbation-based Black-box Attacks to Graph Neural Networks with Theoretical Guarantees","created":"2022-05-07","cited_by_count":9,"area":null},{"id":"2101.06855","title":"GraphAttacker: A General Multi-Task GraphAttack Framework","created":"2021-01-18","cited_by_count":8,"area":null},{"id":"2208.06651","title":"Revisiting Adversarial Attacks on Graph Neural Networks for Graph Classification","created":"2022-08-13","cited_by_count":8,"area":null},{"id":"2201.06202","title":"Neighboring Backdoor Attacks on Graph Convolutional Network","created":"2022-01-17","cited_by_count":7,"area":null},{"id":"2304.04168","title":"Adversarially Robust Neural Architecture Search for Graph Neural Networks","created":"2023-04-09","cited_by_count":7,"area":null},{"id":"2104.03583","title":"Query Driven-Graph Neural Networks for Community Search: From Non-Attributed, Attributed, to Interactive Attributed","created":"2021-04-08","cited_by_count":6,"area":null},{"id":"2403.02723","title":"Minimum Topology Attacks for Graph Neural Networks","created":"2024-03-05","cited_by_count":6,"area":null},{"id":"2111.02842","title":"Adversarial Attacks on Graph Classification via Bayesian Optimisation","created":"2021-11-04","cited_by_count":5,"area":null},{"id":"2112.13267","title":"Task and Model Agnostic Adversarial Attack on Graph Neural Networks","created":"2021-12-25","cited_by_count":5,"area":null},{"id":"2302.12407","title":"HyperAttack: Multi-Gradient-Guided White-box Adversarial Structure Attack of Hypergraph Neural Networks","created":"2023-02-24","cited_by_count":5,"area":null},{"id":"2407.11025","title":"Backdoor Graph Condensation","created":"2024-07-03","cited_by_count":5,"area":null},{"id":"2109.04608","title":"Spatially Focused Attack against Spatiotemporal Graph Neural Networks","created":"2021-09-10","cited_by_count":4,"area":null},{"id":"2110.10482","title":"Surrogate Representation Learning with Isometric Mapping for Gray-box Graph Adversarial Attacks","created":"2021-10-20","cited_by_count":4,"area":null},{"id":"2303.11376","title":"GNN-Ensemble: Towards Random Decision Graph Neural Networks","created":"2023-03-20","cited_by_count":4,"area":null},{"id":"2307.09296","title":"Rumor Detection with Diverse Counterfactual Evidence","created":"2023-07-18","cited_by_count":4,"area":null},{"id":"2310.13822","title":"Adversarial Attacks on Fairness of Graph Neural Networks","created":"2023-10-20","cited_by_count":4,"area":null},{"id":"2412.18365","title":"Hypergraph Attacks via Injecting Homogeneous Nodes into Elite Hyperedges","created":"2024-12-24","cited_by_count":4,"area":null},{"id":"2508.09320","title":"Exact Verification of Graph Neural Networks with Incremental Constraint Solving","created":"2025-08-12","cited_by_count":4,"area":null},{"id":"2107.07737","title":"EGC2: Enhanced Graph Classification with Easy Graph Compression","created":"2021-07-16","cited_by_count":3,"area":null},{"id":"2302.08051","title":"Graph Adversarial Immunization for Certifiable Robustness","created":"2023-02-16","cited_by_count":2,"area":null},{"id":"2308.15614","title":"Everything Perturbed All at Once: Enabling Differentiable Graph Attacks","created":"2023-08-29","cited_by_count":2,"area":null},{"id":"2403.07943","title":"Revisiting Edge Perturbation for Graph Neural Network in Graph Data Augmentation and Attack","created":"2024-03-10","cited_by_count":2,"area":null},{"id":"2406.16357","title":"Towards Lightweight Graph Neural Network Search with Curriculum Graph Sparsification","created":"2024-06-24","cited_by_count":2,"area":null},{"id":"2407.19155","title":"Debiased Graph Poisoning Attack via Contrastive Surrogate Objective","created":"2024-07-27","cited_by_count":2,"area":null},{"id":"2602.06240","title":"ATEX-CF: Attack-Informed Counterfactual Explanations for Graph Neural Networks","created":"2026-02-05","cited_by_count":2,"area":null},{"id":"2102.12284","title":"Graphfool: Targeted Label Adversarial Attack on Graph Embedding","created":"2021-02-24","cited_by_count":1,"area":null},{"id":"2112.06276","title":"Quantifying and Understanding Adversarial Examples in Discrete Input Spaces","created":"2021-12-12","cited_by_count":1,"area":null},{"id":"2204.10072","title":"Detecting Topology Attacks against Graph Neural Networks","created":"2022-04-21","cited_by_count":1,"area":null},{"id":"2205.14440","title":"Large-Scale Privacy-Preserving Network Embedding against Private Link Inference Attacks","created":"2022-05-28","cited_by_count":1,"area":null},{"id":"2312.06568","title":"Sparse but Strong: Crafting Adversarially Robust Graph Lottery Tickets","created":"2023-12-11","cited_by_count":1,"area":null},{"id":"2407.18170","title":"RIDA: A Robust Attack Framework on Incomplete Graphs","created":"2024-07-25","cited_by_count":1,"area":null},{"id":"2408.10948","title":"GAIM: Attacking Graph Neural Networks via Adversarial Influence Maximization","created":"2024-08-20","cited_by_count":1,"area":null},{"id":"2502.09271","title":"LiSA: Leveraging Link Recommender to Attack Graph Neural Networks via Subgraph Injection","created":"2025-02-13","cited_by_count":1,"area":null},{"id":"2111.15446","title":"TEGDetector: A Phishing Detector that Knows Evolving Transaction Behaviors","created":"2021-11-26","cited_by_count":0,"area":null},{"id":"2203.11492","title":"Exploring High-Order Structure for Robust Graph Structure Learning","created":"2022-03-22","cited_by_count":0,"area":null},{"id":"2209.08064","title":"A Systematic Evaluation of Node Embedding Robustness","created":"2022-09-16","cited_by_count":0,"area":null},{"id":"2301.05272","title":"Inaccessible Neural Language Models Could Reinvigorate Linguistic Nativism","created":"2023-01-12","cited_by_count":0,"area":null},{"id":"2308.11754","title":"Multi-Instance Adversarial Attack on GNN-Based Malicious Domain Detection","created":"2023-08-22","cited_by_count":0,"area":null},{"id":"2403.09901","title":"Robust Subgraph Learning by Monitoring Early Training Representations","created":"2024-03-14","cited_by_count":0,"area":null},{"id":"2403.11830","title":"Problem space structural adversarial attacks for Network Intrusion Detection Systems based on Graph Neural Networks","created":"2024-03-18","cited_by_count":0,"area":null},{"id":"2407.11073","title":"SemiAdv: Query-Efficient Black-Box Adversarial Attack with Unlabeled Images","created":"2024-07-13","cited_by_count":0,"area":null},{"id":"2502.16239","title":"Separated Contrastive Learning for Matching in Cross-domain Recommendation with Curriculum Scheduling","created":"2025-02-22","cited_by_count":0,"area":null},{"id":"2506.13344","title":"LapDDPM: A Conditional Graph Diffusion Model for scRNA-seq Generation with Spectral Adversarial Perturbations","created":"2025-06-16","cited_by_count":0,"area":"diffusion"},{"id":"2506.20362","title":"Self-Supervised Graph Learning via Spectral Bootstrapping and Laplacian-Based Augmentations","created":"2025-06-25","cited_by_count":0,"area":null},{"id":"2507.08212","title":"EvA: Evolutionary Attacks on Graphs","created":"2025-07-10","cited_by_count":0,"area":null},{"id":"2603.26136","title":"PEANUT: Perturbations by Eigenvector Alignment for Attacking Graph Neural Networks Under Topology-Driven Message Passing","created":"2026-03-27","cited_by_count":0,"area":null}],"next_cursor":null}