{"total":103,"rows":[{"id":"2106.07178","title":"A Comprehensive Survey on Graph Anomaly Detection with Deep Learning","created":"2021-06-14","cited_by_count":230,"area":null},{"id":"2204.08570","title":"A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability","created":"2022-04-18","cited_by_count":118,"area":null},{"id":"2112.00911","title":"ProtGNN: Towards Self-Explaining Graph Neural Networks","created":"2021-12-02","cited_by_count":96,"area":null},{"id":"2205.07424","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","created":"2022-05-16","cited_by_count":89,"area":null},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2304.05055","title":"A Comprehensive Survey on Deep Graph Representation Learning","created":"2023-04-11","cited_by_count":72,"area":null},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65,"area":null},{"id":"2403.04468","title":"A Survey of Graph Neural Networks in Real world: Imbalance, Noise, Privacy and OOD Challenges","created":"2024-03-07","cited_by_count":54,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2303.01263","title":"Unnoticeable Backdoor Attacks on Graph Neural Networks","created":"2023-02-11","cited_by_count":45,"area":null},{"id":"2104.03674","title":"Explainability-based Backdoor Attacks Against Graph Neural Networks","created":"2021-04-08","cited_by_count":42,"area":null},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34,"area":null},{"id":"2108.09513","title":"A Hard Label Black-box Adversarial Attack Against Graph Neural Networks","created":"2021-08-21","cited_by_count":26,"area":null},{"id":"2110.11024","title":"Watermarking Graph Neural Networks based on Backdoor Attacks","created":"2021-10-21","cited_by_count":25,"area":null},{"id":"2405.10757","title":"Rethinking Graph Backdoor Attacks: A Distribution-Preserving Perspective","created":"2024-05-17","cited_by_count":22,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2204.06127","title":"Reinforcement learning on graphs: A survey","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2205.10014","title":"A Survey of Trustworthy Graph Learning: Reliability, Explainability, and Privacy Protection","created":"2022-05-20","cited_by_count":20,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2210.13710","title":"Motif-Backdoor: Rethinking the Backdoor Attack on Graph Neural Networks via Motifs","created":"2022-10-25","cited_by_count":19,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2206.14724","title":"Private Graph Extraction via Feature Explanations","created":"2022-06-29","cited_by_count":16,"area":null},{"id":"2202.03195","title":"More is Better (Mostly): On the Backdoor Attacks in Federated Graph Neural Networks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2202.12993","title":"Projective Ranking-based GNN Evasion Attacks","created":"2022-02-25","cited_by_count":14,"area":null},{"id":"2202.07114","title":"Recent Advances in Reliable Deep Graph Learning: Inherent Noise, Distribution Shift, and Adversarial Attack","created":"2022-02-15","cited_by_count":10,"area":null},{"id":"2208.06776","title":"Link-Backdoor: Backdoor Attack on Link Prediction via Node Injection","created":"2022-08-14","cited_by_count":10,"area":null},{"id":"2304.12436","title":"An Equivariant Generative Framework for Molecular Graph-Structure Co-Design","created":"2023-04-12","cited_by_count":10,"area":null},{"id":"2401.00163","title":"A clean-label graph backdoor attack method in node classification task","created":"2023-12-30","cited_by_count":10,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2205.03546","title":"Bandits for Structure Perturbation-based Black-box Attacks to Graph Neural Networks with Theoretical Guarantees","created":"2022-05-07","cited_by_count":9,"area":null},{"id":"2209.02902","title":"Defending Against Backdoor Attack on Graph Nerual Network by Explainability","created":"2022-09-07","cited_by_count":9,"area":null},{"id":"2101.06855","title":"GraphAttacker: A General Multi-Task GraphAttack Framework","created":"2021-01-18","cited_by_count":8,"area":null},{"id":"2302.14353","title":"A semantic backdoor attack against Graph Convolutional Networks","created":"2023-02-28","cited_by_count":8,"area":null},{"id":"2312.07861","title":"GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks","created":"2023-12-13","cited_by_count":8,"area":null},{"id":"2410.13761","title":"GDeR: Safeguarding Efficiency, Balancing, and Robustness via Prototypical Graph Pruning","created":"2024-10-17","cited_by_count":8,"area":null},{"id":"2201.06202","title":"Neighboring Backdoor Attacks on Graph Convolutional Network","created":"2022-01-17","cited_by_count":7,"area":null},{"id":"2306.00578","title":"Does Black-box Attribute Inference Attacks on Graph Neural Networks Constitute Privacy Risk?","created":"2023-06-01","cited_by_count":7,"area":null},{"id":"2401.05680","title":"Use of Graph Neural Networks in Aiding Defensive Cyber Operations","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2406.09836","title":"Robustness Inspired Graph Backdoor Defense","created":"2024-06-14","cited_by_count":7,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2109.11249","title":"FooBaR: Fault Fooling Backdoor Attack on Neural Network Training","created":"2021-09-23","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2302.01740","title":"SoK: A Systematic Evaluation of Backdoor Trigger Characteristics in Image Classification","created":"2023-02-03","cited_by_count":6,"area":null},{"id":"2307.05422","title":"Differential Analysis of Triggers and Benign Features for Black-Box DNN Backdoor Detection","created":"2023-07-11","cited_by_count":6,"area":null},{"id":"2308.04406","title":"XGBD: Explanation-Guided Graph Backdoor Detection","created":"2023-08-08","cited_by_count":6,"area":null},{"id":"2403.18136","title":"Identifying Backdoored Graphs in Graph Neural Network Training: An Explanation-Based Approach with Novel Metrics","created":"2024-03-26","cited_by_count":6,"area":null},{"id":"2405.14672","title":"Invisible Backdoor Attack against Self-supervised Learning","created":"2024-05-23","cited_by_count":6,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2111.02842","title":"Adversarial Attacks on Graph Classification via Bayesian Optimisation","created":"2021-11-04","cited_by_count":5,"area":null},{"id":"2308.09490","title":"Balancing Transparency and Risk: The Security and Privacy Risks of Open-Source Machine Learning Models","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2407.11025","title":"Backdoor Graph Condensation","created":"2024-07-03","cited_by_count":5,"area":null},{"id":"2503.21305","title":"DeBackdoor: A Deductive Framework for Detecting Backdoor Attacks on Deep Models with Limited Data","created":"2025-03-27","cited_by_count":5,"area":null},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2110.03875","title":"Dyn-Backdoor: Backdoor Attack on Dynamic Link Prediction","created":"2021-10-08","cited_by_count":4,"area":null},{"id":"2204.06963","title":"Finding MNEMON: Reviving Memories of Node Embeddings","created":"2022-04-14","cited_by_count":4,"area":null},{"id":"2304.02277","title":"Rethinking the Trigger-injecting Position in Graph Backdoor Attack","created":"2023-04-05","cited_by_count":4,"area":null},{"id":"2306.10351","title":"Bkd-FedGNN: A Benchmark for Classification Backdoor Attacks on Federated Graph Neural Network","created":"2023-06-17","cited_by_count":4,"area":null},{"id":"2406.10573","title":"Graph Neural Backdoor: Fundamentals, Methodologies, Applications, and Future Directions","created":"2024-06-15","cited_by_count":4,"area":null},{"id":"2503.07505","title":"From Centralized to Decentralized Federated Learning: Theoretical Insights, Privacy Preservation, and Robustness Challenges","created":"2025-03-10","cited_by_count":4,"area":null},{"id":"2508.09320","title":"Exact Verification of Graph Neural Networks with Incremental Constraint Solving","created":"2025-08-12","cited_by_count":4,"area":null},{"id":"2102.06800","title":"Reinforcement Learning For Data Poisoning on Graph Neural Networks","created":"2021-02-12","cited_by_count":3,"area":null},{"id":"2107.07737","title":"EGC2: Enhanced Graph Classification with Easy Graph Compression","created":"2021-07-16","cited_by_count":3,"area":null},{"id":"2405.05784","title":"Link Stealing Attacks Against Inductive Graph Neural Networks","created":"2024-05-09","cited_by_count":3,"area":null},{"id":"2411.04811","title":"Defending Deep Regression Models against Backdoor Attacks","created":"2024-11-07","cited_by_count":3,"area":null},{"id":"2412.13134","title":"Practicable Black-box Evasion Attacks on Link Prediction in Dynamic Graphs -- A Graph Sequential Embedding Method","created":"2024-12-17","cited_by_count":3,"area":null},{"id":"2305.05257","title":"Survey of Federated Learning Models for Spatial-Temporal Mobility Applications","created":"2023-05-09","cited_by_count":2,"area":null},{"id":"2402.12426","title":"Attacks on Node Attributes in Graph Neural Networks","created":"2024-02-19","cited_by_count":2,"area":null},{"id":"2410.13974","title":"Are You Using Reliable Graph Prompts? Trojan Prompt Attacks on Graph Neural Networks","created":"2024-10-17","cited_by_count":2,"area":null},{"id":"2503.18503","title":"Deterministic Certification of Graph Neural Networks against Graph Poisoning Attacks with Arbitrary Perturbations","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2509.26032","title":"Stealthy Yet Effective: Distribution-Preserving Backdoor Attacks on Graph Classification","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2212.06264","title":"Data Leakage via Access Patterns of Sparse Features in Deep Learning-based Recommendation Systems","created":"2022-12-12","cited_by_count":1,"area":null},{"id":"2311.16139","title":"GNNBleed: Inference Attacks to Unveil Private Edges in Graphs with Realistic Access to GNN Models","created":"2023-11-03","cited_by_count":1,"area":null},{"id":"2404.12704","title":"A Clean-graph Backdoor Attack against Graph Convolutional Networks with Poisoned Label Only","created":"2024-04-19","cited_by_count":1,"area":null},{"id":"2407.02431","title":"On the Robustness of Graph Reduction Against GNN Backdoor","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2410.04823","title":"CAT: Concept-level backdoor ATtacks for Concept Bottleneck Models","created":"2024-10-07","cited_by_count":1,"area":null},{"id":"2410.11290","title":"Backdoor Attack on Vertical Federated Graph Neural Network Learning","created":"2024-10-15","cited_by_count":1,"area":null},{"id":"2411.18648","title":"MADE: Graph Backdoor Defense with Masked Unlearning","created":"2024-11-26","cited_by_count":1,"area":null},{"id":"2502.09271","title":"LiSA: Leveraging Link Recommender to Attack Graph Neural Networks via Subgraph Injection","created":"2025-02-13","cited_by_count":1,"area":null},{"id":"2503.14922","title":"A Semantic and Clean-label Backdoor Attack against Graph Convolutional Networks","created":"2025-03-19","cited_by_count":1,"area":null},{"id":"2504.13527","title":"Designing a reliable lateral movement detector using a graph foundation model","created":"2025-04-18","cited_by_count":1,"area":null},{"id":"2505.04977","title":"ChainMarks: Securing DNN Watermark with Cryptographic Chain","created":"2025-05-08","cited_by_count":1,"area":null},{"id":"2505.11586","title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2505.15308","title":"BadSR: Stealthy Label Backdoor Attacks on Image Super-Resolution","created":"2025-05-21","cited_by_count":1,"area":null},{"id":"2506.08401","title":"Single-Node Trigger Backdoor Attacks in Graph-Based Recommendation Systems","created":"2025-06-10","cited_by_count":1,"area":null},{"id":"2111.14683","title":"Anomaly Localization in Model Gradients Under Backdoor Attacks Against Federated Learning","created":"2021-11-29","cited_by_count":0,"area":null},{"id":"2201.04728","title":"Quasi-Framelets: Robust Graph Neural Networks via Adaptive Framelet Convolution","created":"2022-01-11","cited_by_count":0,"area":null},{"id":"2401.03790","title":"Inferring Properties of Graph Neural Networks","created":"2024-01-08","cited_by_count":0,"area":null},{"id":"2409.19638","title":"BadHMP: Backdoor Attack against Human Motion Prediction","created":"2024-09-29","cited_by_count":0,"area":null},{"id":"2411.02809","title":"Query-Efficient Adversarial Attack Against Vertical Federated Graph Learning","created":"2024-11-05","cited_by_count":0,"area":null},{"id":"2412.05883","title":"On the Adversarial Robustness of Graph Neural Networks with Graph Reduction","created":"2024-12-08","cited_by_count":0,"area":null},{"id":"2502.01272","title":"Boosting Graph Robustness Against Backdoor Attacks: An Over-Similarity Perspective","created":"2025-02-03","cited_by_count":0,"area":null},{"id":"2503.09049","title":"Adaptive Backdoor Attacks with Reasonable Constraints on Graph Neural Networks","created":"2025-03-12","cited_by_count":0,"area":null},{"id":"2505.21140","title":"HeteroBA: A Structure-Manipulating Backdoor Attack on Heterogeneous Graphs","created":"2025-05-27","cited_by_count":0,"area":null},{"id":"2506.00191","title":"Heterogeneous Graph Backdoor Attack","created":"2025-05-30","cited_by_count":0,"area":null},{"id":"2510.22555","title":"Cross-Paradigm Graph Backdoor Attacks with Promptable Subgraph Triggers","created":"2025-10-26","cited_by_count":0,"area":null},{"id":"2603.05004","title":"Poisoning the Inner Prediction Logic of Graph Neural Networks for Clean-Label Backdoor Attacks","created":"2026-03-05","cited_by_count":0,"area":null}],"next_cursor":"100"}