{"id":"https://openalex.org/W4308410017","doi":"https://doi.org/10.1145/3548606.3563531","title":"Poster","display_name":"Poster","publication_year":2022,"publication_date":"2022-11-07","ids":{"openalex":"https://openalex.org/W4308410017","doi":"https://doi.org/10.1145/3548606.3563531"},"language":"en","primary_location":{"id":"doi:10.1145/3548606.3563531","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3548606.3563531","pdf_url":null,"source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://resolver.tudelft.nl/uuid:1e074235-2ccf-470a-9806-2371e918ca39","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041333761","display_name":"Jing Xu","orcid":"https://orcid.org/0000-0002-9900-4081"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Jing Xu","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024072796","display_name":"Stjepan Picek","orcid":"https://orcid.org/0000-0001-7509-4337"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]},{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Stjepan Picek","raw_affiliation_strings":["Radboud University & Delft University of Technology, Nijmegen, Netherlands"],"affiliations":[{"raw_affiliation_string":"Radboud University & Delft University of Technology, Nijmegen, Netherlands","institution_ids":["https://openalex.org/I98358874","https://openalex.org/I145872427"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5041333761"],"corresponding_institution_ids":["https://openalex.org/I98358874"],"apc_list":null,"apc_paid":null,"fwci":2.5043,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.91261261,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"3491","last_page":"3493"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9928505420684814},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7650058269500732},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6955418586730957},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47640979290008545},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4546530544757843},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.43183502554893494},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4317278563976288},{"id":"https://openalex.org/keywords/outlier","display_name":"Outlier","score":0.4122348129749298},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3862605392932892},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.2771782875061035},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1063486635684967}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9928505420684814},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7650058269500732},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6955418586730957},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47640979290008545},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4546530544757843},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.43183502554893494},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4317278563976288},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.4122348129749298},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3862605392932892},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2771782875061035},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1063486635684967},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3548606.3563531","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3548606.3563531","pdf_url":null,"source":{"id":"https://openalex.org/S4363608815","display_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/284394","is_oa":false,"landing_page_url":"https://hdl.handle.net/2066/284394","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article in monograph or in proceedings"},{"id":"pmh:oai:tudelft.nl:uuid:1e074235-2ccf-470a-9806-2371e918ca39","is_oa":true,"landing_page_url":"http://resolver.tudelft.nl/uuid:1e074235-2ccf-470a-9806-2371e918ca39","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"},{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/284394","is_oa":false,"landing_page_url":"http://hdl.handle.net/2066/284394","pdf_url":null,"source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"CCS '22: 2022 ACM SIGSAC Conference on Computer and Communications Security Los Angeles CA USA November 7 - 11, 2022, 3491 - 3493. New York : ACM","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:tudelft.nl:uuid:1e074235-2ccf-470a-9806-2371e918ca39","is_oa":true,"landing_page_url":"http://resolver.tudelft.nl/uuid:1e074235-2ccf-470a-9806-2371e918ca39","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.4099999964237213,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G2300736770","display_name":null,"funder_award_id":"(CSC)","funder_id":"https://openalex.org/F4320322725","funder_display_name":"China Scholarship Council"},{"id":"https://openalex.org/G8589651859","display_name":null,"funder_award_id":"China","funder_id":"https://openalex.org/F4320322725","funder_display_name":"China Scholarship Council"}],"funders":[{"id":"https://openalex.org/F4320322725","display_name":"China Scholarship Council","ror":"https://ror.org/04atp4p48"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W2056562706","https://openalex.org/W2142498761","https://openalex.org/W2152090207","https://openalex.org/W2899457523","https://openalex.org/W2907492528","https://openalex.org/W3009901425","https://openalex.org/W3030055324","https://openalex.org/W3034414373","https://openalex.org/W3099064659","https://openalex.org/W3101707147","https://openalex.org/W3167334189","https://openalex.org/W3174908416","https://openalex.org/W4206445139","https://openalex.org/W4252973173","https://openalex.org/W6681029592"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4386080799","https://openalex.org/W3140988292","https://openalex.org/W4317672133","https://openalex.org/W4328053081"],"abstract_inverted_index":{"Graph":[0],"Neural":[1],"Networks":[2],"(GNNs)":[3],"have":[4,14,34],"achieved":[5],"impressive":[6],"results":[7,112],"in":[8,68,83],"various":[9],"graph":[10,30,136],"learning":[11],"tasks.":[12],"They":[13],"found":[15],"their":[16,97],"way":[17],"into":[18],"many":[19],"applications,":[20],"such":[21],"as":[22,107],"fraud":[23],"detection,":[24],"molecular":[25],"property":[26],"prediction,":[27],"or":[28],"knowledge":[29],"reasoning.":[31],"However,":[32],"GNNs":[33,67,133],"been":[35],"recently":[36],"demonstrated":[37],"to":[38,41,79,93,104,125],"be":[39,94,105],"vulnerable":[40],"backdoor":[42,53,58,64,86,130],"attacks.":[43],"In":[44],"this":[45,147],"work,":[46],"we":[47],"explore":[48],"a":[49,56,84,119,128],"new":[50],"kind":[51],"of":[52,146],"attack,":[54,59,87],"i.e.,":[55],"clean-label":[57,85,129],"on":[60,66,132],"GNNs.":[61],"Unlike":[62],"prior":[63],"attacks":[65],"which":[69],"the":[70,80,88,115,135],"adversary":[71,116],"can":[72,117],"introduce":[73],"arbitrary,":[74],"often":[75],"clearly":[76],"mislabeled,":[77],"inputs":[78,91],"training":[81],"set,":[82],"resulting":[89],"poisoned":[90],"appear":[92],"consistent":[95],"with":[96,127],"label":[98],"and":[99,149],"thus":[100],"are":[101],"less":[102],"likely":[103],"filtered":[106],"outliers.":[108],"The":[109],"initial":[110],"experimental":[111],"illustrate":[113],"that":[114],"achieve":[118],"high":[120],"attack":[121,131,148],"success":[122],"rate":[123],"(up":[124],"98.47%)":[126],"for":[134],"classification":[137],"task.":[138],"We":[139],"hope":[140],"our":[141],"work":[142],"will":[143],"raise":[144],"awareness":[145],"inspire":[150],"novel":[151],"defenses":[152],"against":[153],"it.":[154]},"counts_by_year":[{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":2}],"updated_date":"2026-04-14T08:04:32.555800","created_date":"2022-11-11T00:00:00"}