{"total":112,"rows":[{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2204.08570","title":"A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability","created":"2022-04-18","cited_by_count":118,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90,"area":"safety"},{"id":"2205.07424","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","created":"2022-05-16","cited_by_count":89,"area":null},{"id":"2111.00197","title":"Backdoor Pre-trained Models Can Transfer to All","created":"2021-10-30","cited_by_count":86,"area":null},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2303.01263","title":"Unnoticeable Backdoor Attacks on Graph Neural Networks","created":"2023-02-11","cited_by_count":45,"area":null},{"id":"2107.14569","title":"Can You Hear It? Backdoor Attacks via Ultrasonic Triggers","created":"2021-07-30","cited_by_count":44,"area":null},{"id":"2104.03674","title":"Explainability-based Backdoor Attacks Against Graph Neural Networks","created":"2021-04-08","cited_by_count":42,"area":null},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2108.09513","title":"A Hard Label Black-box Adversarial Attack Against Graph Neural Networks","created":"2021-08-21","cited_by_count":26,"area":null},{"id":"2110.11024","title":"Watermarking Graph Neural Networks based on Backdoor Attacks","created":"2021-10-21","cited_by_count":25,"area":null},{"id":"2111.04333","title":"threaTrace: Detecting and Tracing Host-based Threats in Node Level Through Provenance Graph Learning","created":"2021-11-08","cited_by_count":22,"area":null},{"id":"2405.10757","title":"Rethinking Graph Backdoor Attacks: A Distribution-Preserving Perspective","created":"2024-05-17","cited_by_count":22,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2204.06127","title":"Reinforcement learning on graphs: A survey","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2205.10014","title":"A Survey of Trustworthy Graph Learning: Reliability, Explainability, and Privacy Protection","created":"2022-05-20","cited_by_count":20,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2210.13710","title":"Motif-Backdoor: Rethinking the Backdoor Attack on Graph Neural Networks via Motifs","created":"2022-10-25","cited_by_count":19,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2202.03195","title":"More is Better (Mostly): On the Backdoor Attacks in Federated Graph Neural Networks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2202.12993","title":"Projective Ranking-based GNN Evasion Attacks","created":"2022-02-25","cited_by_count":14,"area":null},{"id":"2405.17984","title":"Cross-Context Backdoor Attacks against Graph Prompt Learning","created":"2024-05-28","cited_by_count":14,"area":"safety"},{"id":"2202.07114","title":"Recent Advances in Reliable Deep Graph Learning: Inherent Noise, Distribution Shift, and Adversarial Attack","created":"2022-02-15","cited_by_count":10,"area":null},{"id":"2208.06776","title":"Link-Backdoor: Backdoor Attack on Link Prediction via Node Injection","created":"2022-08-14","cited_by_count":10,"area":null},{"id":"2401.00163","title":"A clean-label graph backdoor attack method in node classification task","created":"2023-12-30","cited_by_count":10,"area":null},{"id":"2101.06855","title":"GraphAttacker: A General Multi-Task GraphAttack Framework","created":"2021-01-18","cited_by_count":8,"area":null},{"id":"2302.14353","title":"A semantic backdoor attack against Graph Convolutional Networks","created":"2023-02-28","cited_by_count":8,"area":null},{"id":"2303.01742","title":"NCL: Textual Backdoor Defense Using Noise-augmented Contrastive Learning","created":"2023-03-03","cited_by_count":8,"area":"safety"},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2312.07861","title":"GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks","created":"2023-12-13","cited_by_count":8,"area":null},{"id":"2201.06202","title":"Neighboring Backdoor Attacks on Graph Convolutional Network","created":"2022-01-17","cited_by_count":7,"area":null},{"id":"2210.01632","title":"Backdoor Attacks in the Supply Chain of Masked Image Modeling","created":"2022-10-04","cited_by_count":7,"area":null},{"id":"2210.13815","title":"FocusedCleaner: Sanitizing Poisoned Graphs for Robust GNN-based Node Classification","created":"2022-10-25","cited_by_count":7,"area":null},{"id":"2302.14500","title":"FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases","created":"2023-02-28","cited_by_count":7,"area":"safety"},{"id":"2406.09836","title":"Robustness Inspired Graph Backdoor Defense","created":"2024-06-14","cited_by_count":7,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2308.04406","title":"XGBD: Explanation-Guided Graph Backdoor Detection","created":"2023-08-08","cited_by_count":6,"area":null},{"id":"2403.18136","title":"Identifying Backdoored Graphs in Graph Neural Network Training: An Explanation-Based Approach with Novel Metrics","created":"2024-03-26","cited_by_count":6,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2106.07214","title":"Backdoor Learning Curves: Explaining Backdoor Poisoning Beyond Influence Functions","created":"2021-06-14","cited_by_count":5,"area":null},{"id":"2206.00145","title":"CASSOCK: Viable Backdoor Attacks against DNN in The Wall of Source-Specific Backdoor Defences","created":"2022-05-31","cited_by_count":5,"area":null},{"id":"2305.02383","title":"On the Security Risks of Knowledge Graph Reasoning","created":"2023-05-03","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2407.11025","title":"Backdoor Graph Condensation","created":"2024-07-03","cited_by_count":5,"area":null},{"id":"2110.03875","title":"Dyn-Backdoor: Backdoor Attack on Dynamic Link Prediction","created":"2021-10-08","cited_by_count":4,"area":null},{"id":"2204.06963","title":"Finding MNEMON: Reviving Memories of Node Embeddings","created":"2022-04-14","cited_by_count":4,"area":null},{"id":"2304.02277","title":"Rethinking the Trigger-injecting Position in Graph Backdoor Attack","created":"2023-04-05","cited_by_count":4,"area":null},{"id":"2306.10351","title":"Bkd-FedGNN: A Benchmark for Classification Backdoor Attacks on Federated Graph Neural Network","created":"2023-06-17","cited_by_count":4,"area":null},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2406.10573","title":"Graph Neural Backdoor: Fundamentals, Methodologies, Applications, and Future Directions","created":"2024-06-15","cited_by_count":4,"area":null},{"id":"2107.07737","title":"EGC2: Enhanced Graph Classification with Easy Graph Compression","created":"2021-07-16","cited_by_count":3,"area":null},{"id":"2405.05784","title":"Link Stealing Attacks Against Inductive Graph Neural Networks","created":"2024-05-09","cited_by_count":3,"area":null},{"id":"2406.04805","title":"GENIE: Watermarking Graph Neural Networks for Link Prediction","created":"2024-06-07","cited_by_count":3,"area":null},{"id":"2411.04811","title":"Defending Deep Regression Models against Backdoor Attacks","created":"2024-11-07","cited_by_count":3,"area":null},{"id":"2503.06340","title":"Backdoor Attacks on Discrete Graph Diffusion Models","created":"2025-03-08","cited_by_count":3,"area":"diffusion"},{"id":"2506.09562","title":"TooBadRL: Trigger Optimization to Boost Effectiveness of Backdoor Attacks on Deep Reinforcement Learning","created":"2025-06-11","cited_by_count":3,"area":"deeprl"},{"id":"2511.17982","title":"Towards Effective, Stealthy, and Persistent Backdoor Attacks Targeting Graph Foundation Models","created":"2025-11-22","cited_by_count":3,"area":"safety"},{"id":"2407.13068","title":"Krait: A Backdoor Attack Against Graph Prompt Tuning","created":"2024-07-18","cited_by_count":2,"area":"safety"},{"id":"2410.13974","title":"Are You Using Reliable Graph Prompts? Trojan Prompt Attacks on Graph Neural Networks","created":"2024-10-17","cited_by_count":2,"area":null},{"id":"2509.26032","title":"Stealthy Yet Effective: Distribution-Preserving Backdoor Attacks on Graph Classification","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2308.15673","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","created":"2023-08-30","cited_by_count":1,"area":"safety"},{"id":"2311.16139","title":"GNNBleed: Inference Attacks to Unveil Private Edges in Graphs with Realistic Access to GNN Models","created":"2023-11-03","cited_by_count":1,"area":null},{"id":"2401.02663","title":"Effective backdoor attack on graph neural networks in link prediction tasks","created":"2024-01-05","cited_by_count":1,"area":null},{"id":"2404.12704","title":"A Clean-graph Backdoor Attack against Graph Convolutional Networks with Poisoned Label Only","created":"2024-04-19","cited_by_count":1,"area":null},{"id":"2407.02431","title":"On the Robustness of Graph Reduction Against GNN Backdoor","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2410.11290","title":"Backdoor Attack on Vertical Federated Graph Neural Network Learning","created":"2024-10-15","cited_by_count":1,"area":null},{"id":"2411.18648","title":"MADE: Graph Backdoor Defense with Masked Unlearning","created":"2024-11-26","cited_by_count":1,"area":null},{"id":"2502.09271","title":"LiSA: Leveraging Link Recommender to Attack Graph Neural Networks via Subgraph Injection","created":"2025-02-13","cited_by_count":1,"area":null},{"id":"2503.11841","title":"Trust Under Siege: Label Spoofing Attacks against Machine Learning for Android Malware Detection","created":"2025-03-14","cited_by_count":1,"area":null},{"id":"2503.14922","title":"A Semantic and Clean-label Backdoor Attack against Graph Convolutional Networks","created":"2025-03-19","cited_by_count":1,"area":null},{"id":"2505.04977","title":"ChainMarks: Securing DNN Watermark with Cryptographic Chain","created":"2025-05-08","cited_by_count":1,"area":null},{"id":"2506.08401","title":"Single-Node Trigger Backdoor Attacks in Graph-Based Recommendation Systems","created":"2025-06-10","cited_by_count":1,"area":null},{"id":"2506.08602","title":"WGLE:Backdoor-free and Multi-bit Black-box Watermarking for Graph Neural Networks","created":"2025-06-10","cited_by_count":1,"area":null},{"id":"2510.14470","title":"Stealthy Dual-Trigger Backdoors: Attacking Prompt Tuning in LM-Empowered Graph Foundation Models","created":"2025-10-16","cited_by_count":1,"area":"safety"},{"id":"2602.07249","title":"Beyond Crash: Hijacking Your Autonomous Vehicle for Fun and Profit","created":"2026-02-06","cited_by_count":1,"area":"driving"},{"id":"2602.10780","title":"Kill it with FIRE: On Leveraging Latent Space Directions for Runtime Backdoor Mitigation in Deep Neural Networks","created":"2026-02-11","cited_by_count":1,"area":null},{"id":"2603.18570","title":"Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networks","created":"2026-03-19","cited_by_count":1,"area":null},{"id":"2306.07758","title":"Generated Graph Detection","created":"2023-06-13","cited_by_count":0,"area":null},{"id":"2408.08920","title":"A Survey of Trojan Attacks and Defenses to Deep Neural Networks","created":"2024-08-15","cited_by_count":0,"area":null},{"id":"2409.19638","title":"BadHMP: Backdoor Attack against Human Motion Prediction","created":"2024-09-29","cited_by_count":0,"area":null},{"id":"2410.04916","title":"Defense-as-a-Service: Black-box Shielding against Backdoored Graph Models","created":"2024-10-07","cited_by_count":0,"area":null},{"id":"2410.14105","title":"DMGNN: Detecting and Mitigating Backdoor Attacks in Graph Neural Networks","created":"2024-10-18","cited_by_count":0,"area":null},{"id":"2411.02809","title":"Query-Efficient Adversarial Attack Against Vertical Federated Graph Learning","created":"2024-11-05","cited_by_count":0,"area":null},{"id":"2502.01272","title":"Boosting Graph Robustness Against Backdoor Attacks: An Over-Similarity Perspective","created":"2025-02-03","cited_by_count":0,"area":null},{"id":"2503.09049","title":"Adaptive Backdoor Attacks with Reasonable Constraints on Graph Neural Networks","created":"2025-03-12","cited_by_count":0,"area":null},{"id":"2505.21140","title":"HeteroBA: A Structure-Manipulating Backdoor Attack on Heterogeneous Graphs","created":"2025-05-27","cited_by_count":0,"area":null},{"id":"2506.00191","title":"Heterogeneous Graph Backdoor Attack","created":"2025-05-30","cited_by_count":0,"area":null},{"id":"2510.15333","title":"Backdoor or Manipulation? Graph Mixture of Experts Can Defend Against Various Graph Adversarial Attacks","created":"2025-10-17","cited_by_count":0,"area":"moe"},{"id":"2510.22555","title":"Cross-Paradigm Graph Backdoor Attacks with Promptable Subgraph Triggers","created":"2025-10-26","cited_by_count":0,"area":null},{"id":"2511.06072","title":"CatBack: Universal Backdoor Attacks on Tabular Data via Categorical Encoding","created":"2025-11-08","cited_by_count":0,"area":null},{"id":"2512.24665","title":"HeteroHBA: A Generative Structure-Manipulating Backdoor Attack on Heterogeneous Graphs","created":"2025-12-31","cited_by_count":0,"area":"safety"},{"id":"2601.15474","title":"BadImplant: Injection-based Multi-Targeted Graph Backdoor Attack","created":"2026-01-21","cited_by_count":0,"area":null},{"id":"2602.07200","title":"BadSNN: Backdoor Attacks on Spiking Neural Networks via Adversarial Spiking Neuron","created":"2026-02-06","cited_by_count":0,"area":null},{"id":"2602.12250","title":"Community Concealment from Graph Neural Networks","created":"2026-02-12","cited_by_count":0,"area":null}],"next_cursor":"100"}