{"total":98,"rows":[{"id":"2405.06823","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications","created":"2024-05-10","cited_by_count":127,"area":null},{"id":"2204.08570","title":"A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability","created":"2022-04-18","cited_by_count":118,"area":null},{"id":"2205.07424","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","created":"2022-05-16","cited_by_count":89,"area":null},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2108.06504","title":"LinkTeller: Recovering Private Edges from Graph Neural Networks via Influence Analysis","created":"2021-08-14","cited_by_count":65,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2403.04468","title":"A Survey of Graph Neural Networks in Real world: Imbalance, Noise, Privacy and OOD Challenges","created":"2024-03-07","cited_by_count":54,"area":null},{"id":"2110.08760","title":"Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications","created":"2021-10-17","cited_by_count":52,"area":null},{"id":"2106.02820","title":"GraphMI: Extracting Private Graph Data from Graph Neural Networks","created":"2021-06-05","cited_by_count":50,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2203.00949","title":"GAP: Differentially Private Graph Neural Networks with Aggregation Perturbation","created":"2022-03-02","cited_by_count":46,"area":null},{"id":"2402.04013","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","created":"2024-02-06","cited_by_count":30,"area":null},{"id":"2209.07807","title":"Model Inversion Attacks against Graph Neural Networks","created":"2022-09-16","cited_by_count":26,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2308.16375","title":"A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications","created":"2023-08-31","cited_by_count":22,"area":null},{"id":"2407.19398","title":"IDEA: A Flexible Framework of Certified Unlearning for Graph Neural Networks","created":"2024-07-28","cited_by_count":22,"area":null},{"id":"2209.01100","title":"Group Property Inference Attacks Against Graph Neural Networks","created":"2022-09-02","cited_by_count":21,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2205.10014","title":"A Survey of Trustworthy Graph Learning: Reliability, Explainability, and Privacy Protection","created":"2022-05-20","cited_by_count":20,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2201.09398","title":"Towards Private Learning on Decentralized Graphs with Local Differential Privacy","created":"2022-01-23","cited_by_count":16,"area":null},{"id":"2206.14724","title":"Private Graph Extraction via Feature Explanations","created":"2022-06-29","cited_by_count":16,"area":null},{"id":"2301.12951","title":"Unraveling Privacy Risks of Individual Fairness in Graph Neural Networks","created":"2023-01-30","cited_by_count":16,"area":null},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2306.09104","title":"On Strengthening and Defending Graph Reconstruction Attack with Markov Chain Approximation","created":"2023-06-15","cited_by_count":16,"area":null},{"id":"2205.03105","title":"LPGNet: Link Private Graph Networks for Node Classification","created":"2022-05-06","cited_by_count":12,"area":null},{"id":"2304.08928","title":"ProGAP: Progressive Graph Neural Networks with Differential Privacy Guarantees","created":"2023-04-18","cited_by_count":12,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2202.10209","title":"Degree-Preserving Randomized Response for Graph Neural Networks under Local Differential Privacy","created":"2022-02-21","cited_by_count":9,"area":null},{"id":"2411.07536","title":"Model Stealing for Any Low-Rank Language Model","created":"2024-11-12","cited_by_count":9,"area":null},{"id":"2312.07861","title":"GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks","created":"2023-12-13","cited_by_count":8,"area":null},{"id":"2112.08806","title":"Correlation inference attacks against machine learning models","created":"2021-12-16","cited_by_count":7,"area":null},{"id":"2304.02932","title":"Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embedding","created":"2023-04-06","cited_by_count":7,"area":null},{"id":"2306.00578","title":"Does Black-box Attribute Inference Attacks on Graph Neural Networks Constitute Privacy Risk?","created":"2023-06-01","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2309.03190","title":"Blink: Link Local Differential Privacy in Graph Neural Networks via Bayesian Estimation","created":"2023-09-06","cited_by_count":6,"area":null},{"id":"2207.10896","title":"Privacy and Transparency in Graph Machine Learning: A Unified Perspective","created":"2022-07-22","cited_by_count":5,"area":null},{"id":"2308.01469","title":"VertexSerum: Poisoning Graph Neural Networks for Link Inference","created":"2023-08-02","cited_by_count":5,"area":null},{"id":"2309.08569","title":"Local Differential Privacy in Graph Neural Networks: a Reconstruction Approach","created":"2023-09-15","cited_by_count":5,"area":null},{"id":"2312.15591","title":"Privacy-Preserved Neural Graph Databases","created":"2023-12-25","cited_by_count":5,"area":null},{"id":"2111.03308","title":"Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspective","created":"2021-11-05","cited_by_count":4,"area":null},{"id":"2204.06963","title":"Finding MNEMON: Reviving Memories of Node Embeddings","created":"2022-04-14","cited_by_count":4,"area":null},{"id":"2302.04373","title":"Measuring the Privacy Leakage via Graph Reconstruction Attacks on Simplicial Neural Networks (Student Abstract)","created":"2023-02-08","cited_by_count":4,"area":null},{"id":"2308.08360","title":"Independent Distribution Regularization for Private Graph Embedding","created":"2023-08-16","cited_by_count":4,"area":null},{"id":"2501.10985","title":"GRID: Protecting Training Graph from Link Stealing Attacks on GNN Models","created":"2025-01-19","cited_by_count":4,"area":null},{"id":"2506.00808","title":"Unlearning Inversion Attacks for Graph Neural Networks","created":"2025-06-01","cited_by_count":4,"area":null},{"id":"2104.12623","title":"Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Models","created":"2021-04-26","cited_by_count":3,"area":null},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2307.13548","title":"Node Injection Link Stealing Attack","created":"2023-07-25","cited_by_count":3,"area":null},{"id":"2309.11515","title":"Towards Differential Privacy in Sequential Recommendation: A Noisy Graph Neural Network Approach","created":"2023-09-17","cited_by_count":3,"area":null},{"id":"2405.05784","title":"Link Stealing Attacks Against Inductive Graph Neural Networks","created":"2024-05-09","cited_by_count":3,"area":null},{"id":"2405.12295","title":"Efficient Model-Stealing Attacks Against Inductive Graph Neural Networks","created":"2024-05-20","cited_by_count":3,"area":null},{"id":"2406.16963","title":"Large Language Models for Link Stealing Attacks Against Graph Neural Networks","created":"2024-06-22","cited_by_count":3,"area":null},{"id":"2509.05429","title":"Safeguarding Graph Neural Networks against Topology Inference Attacks","created":"2025-09-05","cited_by_count":3,"area":null},{"id":"2210.11730","title":"Privacy-Preserved Neural Graph Similarity Learning","created":"2022-10-21","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2401.12824","title":"MAPPING: Debiasing Graph Neural Networks for Fair Node Classification with Limited Sensitive Information Leakage","created":"2024-01-23","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2410.02826","title":"LinkThief: Combining Generalized Structure Knowledge with Node Similarity for Link Stealing Attack against GNN","created":"2024-10-01","cited_by_count":2,"area":null},{"id":"2503.00065","title":"ADAGE: Active Defenses Against GNN Extraction","created":"2025-02-27","cited_by_count":2,"area":null},{"id":"2503.19070","title":"Graph-Level Label-Only Membership Inference Attack against Graph Neural Networks","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2212.06264","title":"Data Leakage via Access Patterns of Sparse Features in Deep Learning-based Recommendation Systems","created":"2022-12-12","cited_by_count":1,"area":null},{"id":"2310.12112","title":"A Cautionary Tale: On the Role of Reference Data in Empirical Privacy Defenses","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2311.16139","title":"GNNBleed: Inference Attacks to Unveil Private Edges in Graphs with Realistic Access to GNN Models","created":"2023-11-03","cited_by_count":1,"area":null},{"id":"2402.04033","title":"On provable privacy vulnerabilities of graph representations","created":"2024-02-06","cited_by_count":1,"area":null},{"id":"2403.10995","title":"Edge Private Graph Neural Networks with Singular Value Perturbation","created":"2024-03-16","cited_by_count":1,"area":null},{"id":"2410.08299","title":"Privately Learning from Graphs with Applications in Fine-tuning Large Language Models","created":"2024-10-10","cited_by_count":1,"area":null},{"id":"2505.14463","title":"Adverseness vs. Equilibrium: Exploring Graph Adversarial Resilience through Dynamic Equilibrium","created":"2025-05-20","cited_by_count":1,"area":null},{"id":"2506.08602","title":"WGLE:Backdoor-free and Multi-bit Black-box Watermarking for Graph Neural Networks","created":"2025-06-10","cited_by_count":1,"area":null},{"id":"2601.17130","title":"Impact of Graph Structure on Membership-Inference Risk for Graph Neural Networks","created":"2026-01-23","cited_by_count":1,"area":null},{"id":"2302.04383","title":"Privacy-Preserving Representation Learning for Text-Attributed Networks with Simplicial Complexes","created":"2023-02-09","cited_by_count":0,"area":null},{"id":"2306.07758","title":"Generated Graph Detection","created":"2023-06-13","cited_by_count":0,"area":null},{"id":"2307.05775","title":"Weisfeiler and Leman Go Measurement Modeling: Probing the Validity of the WL Test","created":"2023-07-11","cited_by_count":0,"area":null},{"id":"2312.11571","title":"Model Stealing Attack against Recommender System","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2312.14677","title":"MEAOD: Model Extraction Attack against Object Detectors","created":"2023-12-22","cited_by_count":0,"area":null},{"id":"2402.11953","title":"Stealing the Invisible: Unveiling Pre-Trained CNN Models through Adversarial Examples and Timing Side-Channels","created":"2024-02-19","cited_by_count":0,"area":null},{"id":"2405.19649","title":"Towards Deeper Understanding of PPR-based Embedding Approaches: A Topological Perspective","created":"2024-05-30","cited_by_count":0,"area":null},{"id":"2410.19183","title":"Can Self Supervision Rejuvenate Similarity-Based Link Prediction?","created":"2024-10-24","cited_by_count":0,"area":null},{"id":"2411.02809","title":"Query-Efficient Adversarial Attack Against Vertical Federated Graph Learning","created":"2024-11-05","cited_by_count":0,"area":null},{"id":"2502.15012","title":"Graph in the Vault: Protecting Edge GNN Inference with Trusted Execution Environment","created":"2025-02-20","cited_by_count":0,"area":null},{"id":"2503.09726","title":"How Feasible is Augmenting Fake Nodes with Learnable Features as a Counter-strategy against Link Stealing Attacks?","created":"2025-03-12","cited_by_count":0,"area":null},{"id":"2503.12156","title":"Efficient and Privacy-Preserved Link Prediction via Condensed Graphs","created":"2025-03-15","cited_by_count":0,"area":null},{"id":"2506.02134","title":"ReconXF: Graph Reconstruction Attack via Public Feature Explanations on Privatized Node Features and Labels","created":"2025-06-02","cited_by_count":0,"area":null},{"id":"2508.21654","title":"I Stolenly Swear That I Am Up to (No) Good: Design and Evaluation of Model Stealing Attacks","created":"2025-08-29","cited_by_count":0,"area":null},{"id":"2511.01654","title":"Panther: A Cost-Effective Privacy-Preserving Framework for GNN Training and Inference Services in Cloud Environments","created":"2025-11-03","cited_by_count":0,"area":null},{"id":"2511.07170","title":"On Stealing Graph Neural Network Models","created":"2025-11-10","cited_by_count":0,"area":null},{"id":"2512.00307","title":"Adversarial Signed Graph Learning with Differential Privacy","created":"2025-11-29","cited_by_count":0,"area":null},{"id":"2604.15370","title":"TopFeaRe: Locating Critical State of Adversarial Resilience for Graphs Regarding Topology-Feature Entanglement","created":"2026-04-15","cited_by_count":0,"area":null},{"id":"2605.01987","title":"Misclassification Rate and Privacy-Utility Trade-offs in Graph Convolutional Networks via Subsampling Stability","created":"2026-05-03","cited_by_count":0,"area":null},{"id":"2605.03388","title":"Graph Reconstruction from Differentially Private GNN Explanations","created":"2026-05-05","cited_by_count":0,"area":null},{"id":"2605.15460","title":"Differentially Private Motif-Preserving Multi-modal Hashing","created":"2026-05-14","cited_by_count":0,"area":null},{"id":"2606.04069","title":"Bayesian Membership Privacy for Graph Neural Networks","created":"2026-06-02","cited_by_count":0,"area":null},{"id":"2606.26664","title":"TGHE: Template-based Graph Homomorphic Encryption for Privacy-Preserving GNN Inference in Edge-Cloud Systems","created":"2026-06-25","cited_by_count":0,"area":null},{"id":"2608.25727","title":"Auditing Privacy Risks in LLM-Enhanced Graph Neural Networks","created":"2026-08-26","cited_by_count":0,"area":null},{"id":"2609.25155","title":"Empirical Auditing of Edge-Private Graph Generators","created":"2026-09-21","cited_by_count":0,"area":null}],"next_cursor":null}