{"total":58,"rows":[{"id":"2205.07424","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","created":"2022-05-16","cited_by_count":89,"area":null},{"id":"2303.01263","title":"Unnoticeable Backdoor Attacks on Graph Neural Networks","created":"2023-02-11","cited_by_count":45,"area":null},{"id":"2310.19035","title":"Does Invariant Graph Learning via Environment Augmentation Learn Invariance?","created":"2023-10-29","cited_by_count":42,"area":null},{"id":"2206.07766","title":"Pareto Invariant Risk Minimization: Towards Mitigating the Optimization Dilemma in Out-of-Distribution Generalization","created":"2022-06-15","cited_by_count":38,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2404.14928","title":"Graph Machine Learning in the Era of Large Language Models (LLMs)","created":"2024-04-23","cited_by_count":33,"area":null},{"id":"2306.01103","title":"Joint Learning of Label and Environment Causal Independence for Graph Out-of-Distribution Generalization","created":"2023-06-01","cited_by_count":29,"area":null},{"id":"2306.15427","title":"Adversarial Training for Graph Neural Networks: Pitfalls, Solutions, and New Directions","created":"2023-06-27","cited_by_count":28,"area":null},{"id":"2205.13892","title":"EvenNet: Ignoring Odd-Hop Neighbors Improves Robustness of Graph Neural Networks","created":"2022-05-27","cited_by_count":26,"area":null},{"id":"2310.06396","title":"Adversarial Robustness in Graph Neural Networks: A Hamiltonian Approach","created":"2023-10-10","cited_by_count":24,"area":null},{"id":"2308.16375","title":"A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applications","created":"2023-08-31","cited_by_count":22,"area":null},{"id":"2205.10014","title":"A Survey of Trustworthy Graph Learning: Reliability, Explainability, and Privacy Protection","created":"2022-05-20","cited_by_count":20,"area":null},{"id":"2211.10782","title":"Let Graph be the Go Board: Gradient-free Node Injection Attack for Graph Neural Networks via Reinforcement Learning","created":"2022-11-19","cited_by_count":19,"area":null},{"id":"2305.00851","title":"Revisiting Robustness in Graph Machine Learning","created":"2023-05-01","cited_by_count":19,"area":null},{"id":"2306.09104","title":"On Strengthening and Defending Graph Reconstruction Attack with Markov Chain Approximation","created":"2023-06-15","cited_by_count":16,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2406.07955","title":"How Interpretable Are Interpretable Graph Neural Networks?","created":"2024-06-12","cited_by_count":13,"area":null},{"id":"2208.01819","title":"Adversarial Camouflage for Node Injection Attack on Graphs","created":"2022-08-03","cited_by_count":11,"area":null},{"id":"2210.12598","title":"GANI: Global Attacks on Graph Neural Networks via Imperceptible Node Injections","created":"2022-10-23","cited_by_count":10,"area":null},{"id":"2206.02386","title":"Restructuring Graph for Higher Homophily via Adaptive Spectral Clustering","created":"2022-06-06","cited_by_count":9,"area":null},{"id":"2311.01196","title":"Combating Bilateral Edge Noise for Robust Link Prediction","created":"2023-11-02","cited_by_count":9,"area":null},{"id":"2401.04331","title":"Coupling Graph Neural Networks with Fractional Order Continuous Dynamics: A Robustness Study","created":"2024-01-09","cited_by_count":9,"area":null},{"id":"2404.17947","title":"Bounding the Expected Robustness of Graph Neural Networks Subject to Node Feature Attacks","created":"2024-04-27","cited_by_count":9,"area":null},{"id":"2405.16405","title":"Intruding with Words: Towards Understanding Graph Injection Attacks at the Text Level","created":"2024-05-26","cited_by_count":9,"area":null},{"id":"2308.07834","title":"Simple and Efficient Partial Graph Adversarial Attack: A New Perspective","created":"2023-08-15","cited_by_count":8,"area":null},{"id":"2312.03979","title":"Node-aware Bi-smoothing: Certified Robustness against Graph Injection Attacks","created":"2023-12-07","cited_by_count":8,"area":null},{"id":"2301.12277","title":"Node Injection for Class-specific Network Poisoning","created":"2023-01-28","cited_by_count":5,"area":null},{"id":"2308.01469","title":"VertexSerum: Poisoning Graph Neural Networks for Link Inference","created":"2023-08-02","cited_by_count":5,"area":null},{"id":"2310.03312","title":"Certifiably Robust Graph Contrastive Learning","created":"2023-10-05","cited_by_count":5,"area":null},{"id":"2305.15792","title":"IDEA: Invariant Defense for Graph Adversarial Robustness","created":"2023-05-25","cited_by_count":4,"area":null},{"id":"2307.09296","title":"Rumor Detection with Diverse Counterfactual Evidence","created":"2023-07-18","cited_by_count":4,"area":null},{"id":"2211.08657","title":"Person Text-Image Matching via Text-Feature Interpretability Embedding and External Attack Node Implantation","created":"2022-11-16","cited_by_count":3,"area":null},{"id":"2305.02901","title":"Single Node Injection Label Specificity Attack on Graph Neural Networks via Reinforcement Learning","created":"2023-05-04","cited_by_count":3,"area":null},{"id":"2403.01423","title":"Collective Certified Robustness against Graph Injection Attacks","created":"2024-03-03","cited_by_count":3,"area":null},{"id":"2502.01936","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","created":"2025-02-04","cited_by_count":3,"area":null},{"id":"2508.19641","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","created":"2025-08-27","cited_by_count":3,"area":null},{"id":"2208.12815","title":"What Does the Gradient Tell When Attacking the Graph Structure","created":"2022-08-26","cited_by_count":2,"area":null},{"id":"2403.08333","title":"Fast Inference of Removal-Based Node Influence","created":"2024-03-13","cited_by_count":2,"area":null},{"id":"2310.15656","title":"Momentum Gradient-based Untargeted Attack on Hypergraph Neural Networks","created":"2023-10-24","cited_by_count":1,"area":null},{"id":"2311.06942","title":"Resilient Graph Neural Networks: A Coupled Dynamical Systems Approach","created":"2023-11-12","cited_by_count":1,"area":null},{"id":"2311.16139","title":"GNNBleed: Inference Attacks to Unveil Private Edges in Graphs with Realistic Access to GNN Models","created":"2023-11-03","cited_by_count":1,"area":null},{"id":"2405.06247","title":"Disttack: Graph Adversarial Attacks Toward Distributed GNN Training","created":"2024-05-10","cited_by_count":1,"area":null},{"id":"2407.11764","title":"Adversarial Robustness of Graph Transformers","created":"2024-07-16","cited_by_count":1,"area":null},{"id":"2501.05015","title":"On Measuring Unnoticeability of Graph Adversarial Attacks: Observations, New Measure, and Applications","created":"2025-01-09","cited_by_count":1,"area":null},{"id":"2308.11754","title":"Multi-Instance Adversarial Attack on GNN-Based Malicious Domain Detection","created":"2023-08-22","cited_by_count":0,"area":null},{"id":"2401.03790","title":"Inferring Properties of Graph Neural Networks","created":"2024-01-08","cited_by_count":0,"area":null},{"id":"2412.05883","title":"On the Adversarial Robustness of Graph Neural Networks with Graph Reduction","created":"2024-12-08","cited_by_count":0,"area":null},{"id":"2412.07468","title":"AHSG: Adversarial Attack on High-level Semantics in Graph Neural Networks","created":"2024-12-10","cited_by_count":0,"area":null},{"id":"2412.18370","title":"Unveiling the Threat of Fraud Gangs to Graph Neural Networks: Multi-Target Graph Injection Attacks Against GNN-Based Fraud Detectors","created":"2024-12-24","cited_by_count":0,"area":null},{"id":"2503.09726","title":"How Feasible is Augmenting Fake Nodes with Learnable Features as a Counter-strategy against Link Stealing Attacks?","created":"2025-03-12","cited_by_count":0,"area":null},{"id":"2506.13276","title":"Navigating the Black Box: Leveraging LLMs for Effective Text-Level Graph Injection Attacks","created":"2025-06-16","cited_by_count":0,"area":null},{"id":"2509.13266","title":"JANUS: A Dual-Constraint Generative Framework for Stealthy Node Injection Attacks","created":"2025-09-16","cited_by_count":0,"area":null},{"id":"2510.12233","title":"Unveiling the Vulnerability of Graph-LLMs: An Interpretable Multi-Dimensional Adversarial Attack on TAGs","created":"2025-10-14","cited_by_count":0,"area":null},{"id":"2511.22435","title":"PISA: Prioritized Invariant Subgraph Aggregation for Out-of-Distribution Generalization on Graphs","created":"2025-11-27","cited_by_count":0,"area":null},{"id":"2602.01113","title":"Single-Edge Node Injection Threats to GNN-Based Security Monitoring in Industrial Graph Systems","created":"2026-02-01","cited_by_count":0,"area":null},{"id":"2603.12557","title":"Lyapunov Stable Graph Neural Flow","created":"2026-03-13","cited_by_count":0,"area":null},{"id":"2603.21155","title":"Can LLMs Fool Graph Learning? Exploring Universal Adversarial Attacks on Text-Attributed Graphs","created":"2026-03-22","cited_by_count":0,"area":null},{"id":"2603.26136","title":"PEANUT: Perturbations by Eigenvector Alignment for Attacking Graph Neural Networks Under Topology-Driven Message Passing","created":"2026-03-27","cited_by_count":0,"area":null}],"next_cursor":null}