{"total":23,"rows":[{"id":"2205.07424","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","created":"2022-05-16","cited_by_count":89,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2209.07807","title":"Model Inversion Attacks against Graph Neural Networks","created":"2022-09-16","cited_by_count":26,"area":null},{"id":"2405.11034","title":"Safety in Graph Machine Learning: Threats and Safeguards","created":"2024-05-17","cited_by_count":11,"area":null},{"id":"2205.03546","title":"Bandits for Structure Perturbation-based Black-box Attacks to Graph Neural Networks with Theoretical Guarantees","created":"2022-05-07","cited_by_count":9,"area":null},{"id":"2407.09378","title":"Graph Neural Network Causal Explanation via Neural Causal Models","created":"2024-07-12","cited_by_count":9,"area":null},{"id":"2109.13069","title":"Cluster Attack: Query-based Adversarial Attacks on Graphs with Graph-Dependent Priors","created":"2021-09-27","cited_by_count":7,"area":null},{"id":"2210.13660","title":"Multi-SpacePhish: Extending the Evasion-space of Adversarial Attacks against Phishing Website Detectors using Machine Learning","created":"2022-10-24","cited_by_count":7,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2508.09320","title":"Exact Verification of Graph Neural Networks with Incremental Constraint Solving","created":"2025-08-12","cited_by_count":4,"area":null},{"id":"2307.13548","title":"Node Injection Link Stealing Attack","created":"2023-07-25","cited_by_count":3,"area":null},{"id":"2405.10970","title":"Untargeted Adversarial Attack on Knowledge Graph Embeddings","created":"2024-05-08","cited_by_count":3,"area":null},{"id":"2501.05614","title":"Watermarking Graph Neural Networks via Explanations for Ownership Protection","created":"2025-01-09","cited_by_count":3,"area":null},{"id":"2403.07943","title":"Revisiting Edge Perturbation for Graph Neural Network in Graph Data Augmentation and Attack","created":"2024-03-10","cited_by_count":2,"area":null},{"id":"2412.20087","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","created":"2024-12-28","cited_by_count":2,"area":null},{"id":"2503.18503","title":"Deterministic Certification of Graph Neural Networks against Graph Poisoning Attacks with Arbitrary Perturbations","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2512.11352","title":"CAT: Can Trust be Predicted with Context-Awareness in Dynamic Heterogeneous Networks?","created":"2025-12-12","cited_by_count":2,"area":null},{"id":"2311.16139","title":"GNNBleed: Inference Attacks to Unveil Private Edges in Graphs with Realistic Access to GNN Models","created":"2023-11-03","cited_by_count":1,"area":null},{"id":"2505.14463","title":"Adverseness vs. Equilibrium: Exploring Graph Adversarial Resilience through Dynamic Equilibrium","created":"2025-05-20","cited_by_count":1,"area":null},{"id":"2507.08212","title":"EvA: Evolutionary Attacks on Graphs","created":"2025-07-10","cited_by_count":0,"area":null},{"id":"2509.04785","title":"Graph Unlearning: Efficient Node Removal in Graph Neural Networks","created":"2025-09-05","cited_by_count":0,"area":null},{"id":"2510.12233","title":"Unveiling the Vulnerability of Graph-LLMs: An Interpretable Multi-Dimensional Adversarial Attack on TAGs","created":"2025-10-14","cited_by_count":0,"area":null},{"id":"2605.30470","title":"Can Subgraph Explanations Be Weaponized to Steal Graph Neural Networks?","created":"2026-05-28","cited_by_count":0,"area":null}],"next_cursor":null}