{"total":128,"rows":[{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2106.07178","title":"A Comprehensive Survey on Graph Anomaly Detection with Deep Learning","created":"2021-06-14","cited_by_count":230,"area":null},{"id":"2103.14991","title":"Graph Unlearning","created":"2021-03-27","cited_by_count":138,"area":"safety"},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2204.08570","title":"A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability","created":"2022-04-18","cited_by_count":118,"area":null},{"id":"2112.00911","title":"ProtGNN: Towards Self-Explaining Graph Neural Networks","created":"2021-12-02","cited_by_count":96,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90,"area":"safety"},{"id":"2205.07424","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","created":"2022-05-16","cited_by_count":89,"area":null},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2304.05055","title":"A Comprehensive Survey on Deep Graph Representation Learning","created":"2023-04-11","cited_by_count":72,"area":null},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65,"area":null},{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2403.04468","title":"A Survey of Graph Neural Networks in Real world: Imbalance, Noise, Privacy and OOD Challenges","created":"2024-03-07","cited_by_count":54,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2303.01263","title":"Unnoticeable Backdoor Attacks on Graph Neural Networks","created":"2023-02-11","cited_by_count":45,"area":null},{"id":"2104.03674","title":"Explainability-based Backdoor Attacks Against Graph Neural Networks","created":"2021-04-08","cited_by_count":42,"area":null},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34,"area":null},{"id":"2108.09513","title":"A Hard Label Black-box Adversarial Attack Against Graph Neural Networks","created":"2021-08-21","cited_by_count":26,"area":null},{"id":"2110.11024","title":"Watermarking Graph Neural Networks based on Backdoor Attacks","created":"2021-10-21","cited_by_count":25,"area":null},{"id":"2405.10757","title":"Rethinking Graph Backdoor Attacks: A Distribution-Preserving Perspective","created":"2024-05-17","cited_by_count":22,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2204.06127","title":"Reinforcement learning on graphs: A survey","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2205.10014","title":"A Survey of Trustworthy Graph Learning: Reliability, Explainability, and Privacy Protection","created":"2022-05-20","cited_by_count":20,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2210.13710","title":"Motif-Backdoor: Rethinking the Backdoor Attack on Graph Neural Networks via Motifs","created":"2022-10-25","cited_by_count":19,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2510.09269","title":"Goal-oriented Backdoor Attack against Vision-Language-Action Models via Physical Objects","created":"2025-10-10","cited_by_count":17,"area":"vla"},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2206.14724","title":"Private Graph Extraction via Feature Explanations","created":"2022-06-29","cited_by_count":16,"area":null},{"id":"2202.03195","title":"More is Better (Mostly): On the Backdoor Attacks in Federated Graph Neural Networks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2202.12993","title":"Projective Ranking-based GNN Evasion Attacks","created":"2022-02-25","cited_by_count":14,"area":null},{"id":"2405.17984","title":"Cross-Context Backdoor Attacks against Graph Prompt Learning","created":"2024-05-28","cited_by_count":14,"area":"safety"},{"id":"2202.07114","title":"Recent Advances in Reliable Deep Graph Learning: Inherent Noise, Distribution Shift, and Adversarial Attack","created":"2022-02-15","cited_by_count":10,"area":null},{"id":"2208.06776","title":"Link-Backdoor: Backdoor Attack on Link Prediction via Node Injection","created":"2022-08-14","cited_by_count":10,"area":null},{"id":"2304.12436","title":"An Equivariant Generative Framework for Molecular Graph-Structure Co-Design","created":"2023-04-12","cited_by_count":10,"area":null},{"id":"2401.00163","title":"A clean-label graph backdoor attack method in node classification task","created":"2023-12-30","cited_by_count":10,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2112.03695","title":"Safe Distillation Box","created":"2021-12-05","cited_by_count":9,"area":"distill"},{"id":"2205.03546","title":"Bandits for Structure Perturbation-based Black-box Attacks to Graph Neural Networks with Theoretical Guarantees","created":"2022-05-07","cited_by_count":9,"area":null},{"id":"2209.02902","title":"Defending Against Backdoor Attack on Graph Nerual Network by Explainability","created":"2022-09-07","cited_by_count":9,"area":null},{"id":"2311.02373","title":"From Trojan Horses to Castle Walls: Unveiling Bilateral Data Poisoning Effects in Diffusion Models","created":"2023-11-04","cited_by_count":9,"area":"diffusion"},{"id":"2101.06855","title":"GraphAttacker: A General Multi-Task GraphAttack Framework","created":"2021-01-18","cited_by_count":8,"area":null},{"id":"2302.14353","title":"A semantic backdoor attack against Graph Convolutional Networks","created":"2023-02-28","cited_by_count":8,"area":null},{"id":"2312.07861","title":"GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks","created":"2023-12-13","cited_by_count":8,"area":null},{"id":"2410.13761","title":"GDeR: Safeguarding Efficiency, Balancing, and Robustness via Prototypical Graph Pruning","created":"2024-10-17","cited_by_count":8,"area":null},{"id":"2201.06202","title":"Neighboring Backdoor Attacks on Graph Convolutional Network","created":"2022-01-17","cited_by_count":7,"area":null},{"id":"2306.00578","title":"Does Black-box Attribute Inference Attacks on Graph Neural Networks Constitute Privacy Risk?","created":"2023-06-01","cited_by_count":7,"area":null},{"id":"2401.05680","title":"Use of Graph Neural Networks in Aiding Defensive Cyber Operations","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2406.09836","title":"Robustness Inspired Graph Backdoor Defense","created":"2024-06-14","cited_by_count":7,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2109.11249","title":"FooBaR: Fault Fooling Backdoor Attack on Neural Network Training","created":"2021-09-23","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2302.01740","title":"SoK: A Systematic Evaluation of Backdoor Trigger Characteristics in Image Classification","created":"2023-02-03","cited_by_count":6,"area":null},{"id":"2307.05422","title":"Differential Analysis of Triggers and Benign Features for Black-Box DNN Backdoor Detection","created":"2023-07-11","cited_by_count":6,"area":null},{"id":"2308.04406","title":"XGBD: Explanation-Guided Graph Backdoor Detection","created":"2023-08-08","cited_by_count":6,"area":null},{"id":"2310.06372","title":"Leveraging Diffusion-Based Image Variations for Robust Training on Poisoned Data","created":"2023-10-10","cited_by_count":6,"area":"diffusion"},{"id":"2403.18136","title":"Identifying Backdoored Graphs in Graph Neural Network Training: An Explanation-Based Approach with Novel Metrics","created":"2024-03-26","cited_by_count":6,"area":null},{"id":"2405.14672","title":"Invisible Backdoor Attack against Self-supervised Learning","created":"2024-05-23","cited_by_count":6,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2111.02842","title":"Adversarial Attacks on Graph Classification via Bayesian Optimisation","created":"2021-11-04","cited_by_count":5,"area":null},{"id":"2308.09490","title":"Balancing Transparency and Risk: The Security and Privacy Risks of Open-Source Machine Learning Models","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2407.11025","title":"Backdoor Graph Condensation","created":"2024-07-03","cited_by_count":5,"area":null},{"id":"2503.21305","title":"DeBackdoor: A Deductive Framework for Detecting Backdoor Attacks on Deep Models with Limited Data","created":"2025-03-27","cited_by_count":5,"area":null},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2110.03875","title":"Dyn-Backdoor: Backdoor Attack on Dynamic Link Prediction","created":"2021-10-08","cited_by_count":4,"area":null},{"id":"2204.06963","title":"Finding MNEMON: Reviving Memories of Node Embeddings","created":"2022-04-14","cited_by_count":4,"area":null},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2304.02277","title":"Rethinking the Trigger-injecting Position in Graph Backdoor Attack","created":"2023-04-05","cited_by_count":4,"area":null},{"id":"2306.10351","title":"Bkd-FedGNN: A Benchmark for Classification Backdoor Attacks on Federated Graph Neural Network","created":"2023-06-17","cited_by_count":4,"area":null},{"id":"2402.14977","title":"Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models","created":"2024-02-22","cited_by_count":4,"area":"safety"},{"id":"2406.10573","title":"Graph Neural Backdoor: Fundamentals, Methodologies, Applications, and Future Directions","created":"2024-06-15","cited_by_count":4,"area":null},{"id":"2503.07505","title":"From Centralized to Decentralized Federated Learning: Theoretical Insights, Privacy Preservation, and Robustness Challenges","created":"2025-03-10","cited_by_count":4,"area":null},{"id":"2508.09320","title":"Exact Verification of Graph Neural Networks with Incremental Constraint Solving","created":"2025-08-12","cited_by_count":4,"area":null},{"id":"2102.06800","title":"Reinforcement Learning For Data Poisoning on Graph Neural Networks","created":"2021-02-12","cited_by_count":3,"area":null},{"id":"2107.07737","title":"EGC2: Enhanced Graph Classification with Easy Graph Compression","created":"2021-07-16","cited_by_count":3,"area":null},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2405.05784","title":"Link Stealing Attacks Against Inductive Graph Neural Networks","created":"2024-05-09","cited_by_count":3,"area":null},{"id":"2411.04811","title":"Defending Deep Regression Models against Backdoor Attacks","created":"2024-11-07","cited_by_count":3,"area":null},{"id":"2412.13134","title":"Practicable Black-box Evasion Attacks on Link Prediction in Dynamic Graphs -- A Graph Sequential Embedding Method","created":"2024-12-17","cited_by_count":3,"area":null},{"id":"2503.06340","title":"Backdoor Attacks on Discrete Graph Diffusion Models","created":"2025-03-08","cited_by_count":3,"area":"diffusion"},{"id":"2305.05257","title":"Survey of Federated Learning Models for Spatial-Temporal Mobility Applications","created":"2023-05-09","cited_by_count":2,"area":null},{"id":"2402.12426","title":"Attacks on Node Attributes in Graph Neural Networks","created":"2024-02-19","cited_by_count":2,"area":null},{"id":"2407.13068","title":"Krait: A Backdoor Attack Against Graph Prompt Tuning","created":"2024-07-18","cited_by_count":2,"area":"safety"},{"id":"2410.13974","title":"Are You Using Reliable Graph Prompts? Trojan Prompt Attacks on Graph Neural Networks","created":"2024-10-17","cited_by_count":2,"area":null},{"id":"2503.18503","title":"Deterministic Certification of Graph Neural Networks against Graph Poisoning Attacks with Arbitrary Perturbations","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2509.26032","title":"Stealthy Yet Effective: Distribution-Preserving Backdoor Attacks on Graph Classification","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2212.06264","title":"Data Leakage via Access Patterns of Sparse Features in Deep Learning-based Recommendation Systems","created":"2022-12-12","cited_by_count":1,"area":null},{"id":"2308.15673","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","created":"2023-08-30","cited_by_count":1,"area":"safety"},{"id":"2311.16139","title":"GNNBleed: Inference Attacks to Unveil Private Edges in Graphs with Realistic Access to GNN Models","created":"2023-11-03","cited_by_count":1,"area":null},{"id":"2404.12704","title":"A Clean-graph Backdoor Attack against Graph Convolutional Networks with Poisoned Label Only","created":"2024-04-19","cited_by_count":1,"area":null},{"id":"2407.02431","title":"On the Robustness of Graph Reduction Against GNN Backdoor","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2410.04823","title":"CAT: Concept-level backdoor ATtacks for Concept Bottleneck Models","created":"2024-10-07","cited_by_count":1,"area":null},{"id":"2410.11290","title":"Backdoor Attack on Vertical Federated Graph Neural Network Learning","created":"2024-10-15","cited_by_count":1,"area":null},{"id":"2411.18648","title":"MADE: Graph Backdoor Defense with Masked Unlearning","created":"2024-11-26","cited_by_count":1,"area":null},{"id":"2502.09271","title":"LiSA: Leveraging Link Recommender to Attack Graph Neural Networks via Subgraph Injection","created":"2025-02-13","cited_by_count":1,"area":null}],"next_cursor":"100"}