{"total":16,"rows":[{"id":"2108.09513","title":"A Hard Label Black-box Adversarial Attack Against Graph Neural Networks","created":"2021-08-21","cited_by_count":26,"area":null},{"id":"2106.07767","title":"How does Heterophily Impact the Robustness of Graph Neural Networks? Theoretical Connections and Practical Implications","created":"2021-06-14","cited_by_count":21,"area":null},{"id":"2402.13937","title":"Verifying message-passing neural networks via topology-based bounds tightening","created":"2024-02-21","cited_by_count":10,"area":null},{"id":"2206.05070","title":"Fundamental Limits in Formal Verification of Message-Passing Neural Networks","created":"2022-06-10","cited_by_count":9,"area":null},{"id":"2101.06855","title":"GraphAttacker: A General Multi-Task GraphAttack Framework","created":"2021-01-18","cited_by_count":8,"area":null},{"id":"2201.06202","title":"Neighboring Backdoor Attacks on Graph Convolutional Network","created":"2022-01-17","cited_by_count":7,"area":null},{"id":"2110.03875","title":"Dyn-Backdoor: Backdoor Attack on Dynamic Link Prediction","created":"2021-10-08","cited_by_count":4,"area":null},{"id":"2211.11534","title":"Towards Adversarially Robust Recommendation from Adaptive Fraudster Detection","created":"2022-11-08","cited_by_count":3,"area":null},{"id":"2412.13134","title":"Practicable Black-box Evasion Attacks on Link Prediction in Dynamic Graphs -- A Graph Sequential Embedding Method","created":"2024-12-17","cited_by_count":3,"area":null},{"id":"2503.18503","title":"Deterministic Certification of Graph Neural Networks against Graph Poisoning Attacks with Arbitrary Perturbations","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2102.12284","title":"Graphfool: Targeted Label Adversarial Attack on Graph Embedding","created":"2021-02-24","cited_by_count":1,"area":null},{"id":"2501.05015","title":"On Measuring Unnoticeability of Graph Adversarial Attacks: Observations, New Measure, and Applications","created":"2025-01-09","cited_by_count":1,"area":null},{"id":"2202.06250","title":"Privacy protection based on mask template","created":"2022-02-13","cited_by_count":0,"area":null},{"id":"2308.11754","title":"Multi-Instance Adversarial Attack on GNN-Based Malicious Domain Detection","created":"2023-08-22","cited_by_count":0,"area":null},{"id":"2403.11830","title":"Problem space structural adversarial attacks for Network Intrusion Detection Systems based on Graph Neural Networks","created":"2024-03-18","cited_by_count":0,"area":null},{"id":"2405.08645","title":"Certifying Robustness of Graph Convolutional Networks for Node Perturbation with Polyhedra Abstract Interpretation","created":"2024-05-14","cited_by_count":0,"area":null}],"next_cursor":null}