{"id":"https://openalex.org/W4416250586","doi":"https://doi.org/10.1109/ijcnn64981.2025.11229373","title":"NPBD: Neighbor Pattern-Based Backdoor Detection for Node Classifiers","display_name":"NPBD: Neighbor Pattern-Based Backdoor Detection for Node Classifiers","publication_year":2025,"publication_date":"2025-06-30","ids":{"openalex":"https://openalex.org/W4416250586","doi":"https://doi.org/10.1109/ijcnn64981.2025.11229373"},"language":null,"primary_location":{"id":"doi:10.1109/ijcnn64981.2025.11229373","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn64981.2025.11229373","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017515230","display_name":"Mengfan Li","orcid":"https://orcid.org/0009-0002-1185-3466"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]},{"id":"https://openalex.org/I4210111616","display_name":"Wuhan Business University","ror":"https://ror.org/0282ggx30","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210111616"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengfan Li","raw_affiliation_strings":["Wuhan University,School of Cyber Science and Engineering & School of Computer Science,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University,School of Cyber Science and Engineering & School of Computer Science,Wuhan,China","institution_ids":["https://openalex.org/I37461747","https://openalex.org/I4210111616"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033128202","display_name":"Ming Zhong","orcid":"https://orcid.org/0000-0001-9376-818X"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]},{"id":"https://openalex.org/I4210111616","display_name":"Wuhan Business University","ror":"https://ror.org/0282ggx30","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210111616"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ming Zhong","raw_affiliation_strings":["Wuhan University,School of Cyber Science and Engineering & School of Computer Science,Wuhan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University,School of Cyber Science and Engineering & School of Computer Science,Wuhan,China","institution_ids":["https://openalex.org/I37461747","https://openalex.org/I4210111616"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.7865999937057495,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.7865999937057495,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.028599999845027924,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.023499999195337296,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9534000158309937},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6506999731063843},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.5810999870300293},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.48829999566078186},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4781999886035919},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4092999994754791},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.40209999680519104},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.39309999346733093}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9534000158309937},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6988000273704529},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6506999731063843},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.5810999870300293},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5690000057220459},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5085999965667725},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.490200012922287},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.48829999566078186},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4781999886035919},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4092999994754791},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.40209999680519104},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.39309999346733093},{"id":"https://openalex.org/C113238511","wikidata":"https://www.wikidata.org/wiki/Q1071612","display_name":"k-nearest neighbors algorithm","level":2,"score":0.3806000053882599},{"id":"https://openalex.org/C27158222","wikidata":"https://www.wikidata.org/wiki/Q5532422","display_name":"Generalizability theory","level":2,"score":0.3529999852180481},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.33000001311302185},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.31459999084472656},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.28630000352859497},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.28459998965263367},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.2689000070095062},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.2540000081062317},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.25099998712539673}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn64981.2025.11229373","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn64981.2025.11229373","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322186","display_name":"Natural Science Foundation of Hubei Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W2166693382","https://openalex.org/W2934843808","https://openalex.org/W2944250323","https://openalex.org/W3089258356","https://openalex.org/W3178367256","https://openalex.org/W4231449374","https://openalex.org/W4293363567","https://openalex.org/W4313378981","https://openalex.org/W4318823263","https://openalex.org/W4323066547","https://openalex.org/W4367672248","https://openalex.org/W4382469817","https://openalex.org/W4385565711","https://openalex.org/W4387327976","https://openalex.org/W4398157294","https://openalex.org/W4400502903","https://openalex.org/W4405862560"],"related_works":[],"abstract_inverted_index":{"Graph":[0],"Neural":[1],"Networks":[2],"(GNNs)":[3],"have":[4],"been":[5],"demonstrated":[6],"to":[7,10,35,61,77,101,110],"be":[8],"vulnerable":[9],"backdoor":[11,28],"attacks,":[12],"which":[13],"hinder":[14],"their":[15,46],"deployment":[16],"in":[17,48,92],"security-sensitive":[18],"applications":[19],"such":[20],"as":[21],"intrusion":[22],"detection":[23,29,125,132,152],"and":[24,83,121,139,146],"fraud":[25],"detection.":[26],"Existing":[27],"approaches":[30],"often":[31],"rely":[32],"on":[33,141],"access":[34],"poisoned":[36],"samples":[37],"or":[38],"make":[39],"assumptions":[40],"about":[41],"attack":[42],"strategies,":[43],"thereby":[44],"limiting":[45],"effectiveness":[47,120],"real-world":[49,93],"scenarios.":[50],"We":[51,117],"propose":[52],"a":[53],"model-level":[54],"approach,":[55],"Neighbor":[56,74],"Pattern-Based":[57],"Backdoor":[58],"Detection":[59],"(NPBD),":[60],"eliminate":[62],"these":[63],"limitations.":[64],"Our":[65],"approach":[66,126],"introduces":[67],"the":[68,103,108,119,142],"Contextual":[69],"Stochastic":[70],"Block":[71],"Model":[72],"for":[73],"Patterns":[75],"(CSBM-NP)":[76],"generate":[78],"synthetic":[79,96],"graphs":[80,97],"with":[81],"diverse":[82],"controlled":[84],"neighbor":[85],"patterns,":[86],"including":[87],"those":[88],"not":[89],"typically":[90],"found":[91],"datasets.":[94],"These":[95],"are":[98],"then":[99],"optimized":[100],"enhance":[102],"discriminative":[104],"features":[105],"that":[106],"enable":[107],"classifier":[109],"distinguish":[111],"backdoored":[112],"models":[113],"from":[114],"benign":[115],"ones.":[116],"validate":[118],"generalizability":[122],"of":[123,135],"our":[124],"through":[127],"comprehensive":[128],"experiments,":[129],"achieving":[130],"average":[131],"AUC":[133],"values":[134],"0.99,":[136],"0.97,":[137],"0.91,":[138],"0.92":[140],"Cora,":[143],"PubMed,":[144],"Flickr,":[145],"OGB-arxiv":[147],"datasets,":[148],"respectively,":[149],"surpassing":[150],"existing":[151],"approaches.":[153]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-14T00:00:00"}