{"id":"https://openalex.org/W4416323723","doi":"https://doi.org/10.1109/tcss.2025.3625280","title":"Persistent Clean-Label Backdoor Attacks on Semisupervised Social Graph Node Classification","display_name":"Persistent Clean-Label Backdoor Attacks on Semisupervised Social Graph Node Classification","publication_year":2025,"publication_date":"2025-11-18","ids":{"openalex":"https://openalex.org/W4416323723","doi":"https://doi.org/10.1109/tcss.2025.3625280"},"language":null,"primary_location":{"id":"doi:10.1109/tcss.2025.3625280","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcss.2025.3625280","pdf_url":null,"source":{"id":"https://openalex.org/S2490693980","display_name":"IEEE Transactions on Computational Social Systems","issn_l":"2329-924X","issn":["2329-924X","2373-7476"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computational Social Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101632772","display_name":"Xiao Yang","orcid":"https://orcid.org/0000-0002-1736-3065"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao Yang","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-1736-3065","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007267530","display_name":"Gaolei Li","orcid":"https://orcid.org/0000-0003-3913-5001"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gaolei Li","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-3913-5001","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069451446","display_name":"Xinzheng Feng","orcid":"https://orcid.org/0000-0002-1063-3528"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinzheng Feng","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-1063-3528","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114462004","display_name":"Xiaoyu Yi","orcid":"https://orcid.org/0009-0001-1772-0368"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyu Yi","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0001-1772-0368","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100391361","display_name":"Jianhua Li","orcid":"https://orcid.org/0000-0002-6831-3973"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianhua Li","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-6831-3973","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.17766395,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"2","first_page":"2236","last_page":"2252"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9735000133514404,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9735000133514404,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.002099999925121665,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12488","display_name":"Mental Health via Writing","score":0.0015999999595806003,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9557999968528748},{"id":"https://openalex.org/keywords/social-graph","display_name":"Social graph","score":0.645799994468689},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5830000042915344},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5547000169754028},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.49900001287460327},{"id":"https://openalex.org/keywords/gaussian","display_name":"Gaussian","score":0.41839998960494995},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4099999964237213},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4027999937534332},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.3982999920845032}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9557999968528748},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6796000003814697},{"id":"https://openalex.org/C2777522414","wikidata":"https://www.wikidata.org/wiki/Q648457","display_name":"Social graph","level":3,"score":0.645799994468689},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5830000042915344},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5547000169754028},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.49900001287460327},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48579999804496765},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.43810001015663147},{"id":"https://openalex.org/C163716315","wikidata":"https://www.wikidata.org/wiki/Q901177","display_name":"Gaussian","level":2,"score":0.41839998960494995},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4099999964237213},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4027999937534332},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3982999920845032},{"id":"https://openalex.org/C191178318","wikidata":"https://www.wikidata.org/wiki/Q2256906","display_name":"Thresholding","level":3,"score":0.38659998774528503},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.367900013923645},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36149999499320984},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.358599990606308},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.3357999920845032},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.31119999289512634},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.30730000138282776},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.3043999969959259},{"id":"https://openalex.org/C2776145971","wikidata":"https://www.wikidata.org/wiki/Q30673951","display_name":"Labeled data","level":2,"score":0.2854999899864197},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.28209999203681946},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2784999907016754},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.27549999952316284},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.27469998598098755},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C163339463","wikidata":"https://www.wikidata.org/wiki/Q484598","display_name":"CAPTCHA","level":2,"score":0.25940001010894775},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tcss.2025.3625280","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcss.2025.3625280","pdf_url":null,"source":{"id":"https://openalex.org/S2490693980","display_name":"IEEE Transactions on Computational Social Systems","issn_l":"2329-924X","issn":["2329-924X","2373-7476"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computational Social Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4664115551","display_name":null,"funder_award_id":"62202303","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5875462336","display_name":null,"funder_award_id":"62572314","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7047364517","display_name":null,"funder_award_id":"62471301","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Semisupervised":[0],"social":[1,12],"graph":[2,13,25,126],"node":[3],"classification":[4],"(SSGNC)":[5],"attempts":[6],"to":[7,50,72,77,95,121,137,160,170,179],"deduce":[8],"node-related":[9],"information":[10],"of":[11,107],"with":[14,91,143],"limited":[15],"labeled":[16],"training":[17,68,125],"samples.":[18],"It":[19,156],"is":[20,46],"primarily":[21],"deployed":[22],"in":[23,37],"large-scale":[24],"processing,":[26],"e.g.,":[27],"malicious":[28,82],"client":[29],"detection,":[30],"knowledge":[31],"graph,":[32],"and":[33,127,164,168,188,203,211],"recommender":[34],"system.":[35],"However,":[36],"this":[38],"article,":[39],"we":[40,146],"identify":[41,161],"that":[42,191],"the":[43,74,119,124,131,172,204],"SSGNC":[44,139,186],"model":[45,76,132],"also":[47],"extremely":[48],"sensitive":[49],"backdoor":[51,59],"attacks.":[52],"We":[53],"present":[54,147],"a":[55,87,104,148],"novel":[56],"persistent":[57],"clean-label":[58],"attack":[60,195],"(PerCBA)":[61],"on":[62,184],"SSGNC,":[63],"which":[64],"selectively":[65],"poisons":[66],"unmarked":[67,108],"nodes":[69,109,163],"before":[70],"learning":[71],"compel":[73],"trained":[75],"misclassify":[78],"trigger-embedded":[79],"inputs":[80],"into":[81,130],"class.":[83],"Specifically,":[84],"PerCBA":[85,192],"employs":[86,157],"style-agnostic":[88],"trigger":[89,173],"generator":[90],"adjustable":[92],"perturbation":[93],"strategy":[94,153],"produce":[96],"perturbed":[97],"triggers.":[98],"These":[99],"triggers":[100],"are":[101],"pasted":[102],"onto":[103],"small":[105],"subset":[106],"(<inline-formula":[110],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[111],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">":[112],"<tex-math":[113],"notation=\"LaTeX\">$&lt;":[114],"\\,":[115],"4\\%$</tex-math>":[116],"</inline-formula>),":[117],"enabling":[118],"adversary":[120],"covertly":[122],"poison":[123],"implant":[128],"backdoors":[129],"without":[133],"modifying":[134],"labels.":[135],"Additionally,":[136],"ensure":[138],"robustness":[140],"when":[141],"confronted":[142],"homogenous":[144],"threats,":[145],"testing":[149],"sample":[150],"filtering-based":[151],"defense":[152,205],"for":[154],"PerCBA.":[155],"feature":[158],"distribution":[159],"poisoned":[162],"applies":[165],"Gaussian":[166],"blur":[167],"thresholding":[169],"remove":[171],"fraction,":[174],"thereby":[175],"restoring":[176],"suspicious":[177],"data":[178],"clean":[180],"states.":[181],"Extensive":[182],"experiments":[183],"SOTA":[185],"models":[187],"datasets":[189],"indicate":[190],"performs":[193],"high":[194],"success":[196],"rates":[197],"(maxima":[198],"96.25%)":[199],"while":[200],"remaining":[201],"evasive,":[202],"method":[206],"can":[207],"effectively":[208],"mitigate":[209],"attacks":[210],"purify":[212],"backdoored":[213],"models.":[214]},"counts_by_year":[],"updated_date":"2026-04-03T16:38:21.277918","created_date":"2025-11-18T00:00:00"}