{"id":"https://openalex.org/W4385342974","doi":"https://doi.org/10.1145/3611307","title":"SAM: Query-efficient Adversarial Attacks against Graph Neural Networks","display_name":"SAM: Query-efficient Adversarial Attacks against Graph Neural Networks","publication_year":2023,"publication_date":"2023-07-28","ids":{"openalex":"https://openalex.org/W4385342974","doi":"https://doi.org/10.1145/3611307"},"language":"en","primary_location":{"id":"doi:10.1145/3611307","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3611307","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061304518","display_name":"Chenhan Zhang","orcid":"https://orcid.org/0000-0002-2352-0485"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chenhan Zhang","raw_affiliation_strings":["University of Technology Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-2352-0485","affiliations":[{"raw_affiliation_string":"University of Technology Sydney, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064293717","display_name":"Shiyao Zhang","orcid":"https://orcid.org/0000-0002-0004-1801"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shiyao Zhang","raw_affiliation_strings":["Southern University of Science and Technology, China"],"raw_orcid":"https://orcid.org/0000-0002-0004-1801","affiliations":[{"raw_affiliation_string":"Southern University of Science and Technology, China","institution_ids":["https://openalex.org/I3045169105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076130415","display_name":"James J. Q. Yu","orcid":"https://orcid.org/0000-0002-6392-6711"},"institutions":[{"id":"https://openalex.org/I52099693","display_name":"University of York","ror":"https://ror.org/04m01e293","country_code":"GB","type":"education","lineage":["https://openalex.org/I52099693"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"James J. Q. Yu","raw_affiliation_strings":["University of York, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-6392-6711","affiliations":[{"raw_affiliation_string":"University of York, United Kingdom","institution_ids":["https://openalex.org/I52099693"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005228053","display_name":"Shui Yu","orcid":"https://orcid.org/0000-0003-4485-6743"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shui Yu","raw_affiliation_strings":["University of Technology Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4485-6743","affiliations":[{"raw_affiliation_string":"University of Technology Sydney, Australia","institution_ids":["https://openalex.org/I114017466"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.1104,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.8102981,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"26","issue":"4","first_page":"1","last_page":"19"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9843999743461609,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9503999948501587,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7318227291107178},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6427925825119019},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.595792293548584},{"id":"https://openalex.org/keywords/salient","display_name":"Salient","score":0.5544942617416382},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.4817752540111542},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4198117256164551},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4065108299255371},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3735276460647583},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.3531661033630371},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.27584391832351685},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1972375214099884}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7318227291107178},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6427925825119019},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.595792293548584},{"id":"https://openalex.org/C2780719617","wikidata":"https://www.wikidata.org/wiki/Q1030752","display_name":"Salient","level":2,"score":0.5544942617416382},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.4817752540111542},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4198117256164551},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4065108299255371},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3735276460647583},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.3531661033630371},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.27584391832351685},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1972375214099884},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3611307","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3611307","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.41999998688697815,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G3493151380","display_name":"Smart Personalized Privacy Preserved Information Sharing in Social Networks","funder_award_id":"DP200101374","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"}],"funders":[{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2153959628","https://openalex.org/W2243397390","https://openalex.org/W2416738288","https://openalex.org/W2492695942","https://openalex.org/W2602753196","https://openalex.org/W2624431344","https://openalex.org/W2884041582","https://openalex.org/W2907492528","https://openalex.org/W2908442265","https://openalex.org/W2912568927","https://openalex.org/W2947832965","https://openalex.org/W2964043980","https://openalex.org/W2964971928","https://openalex.org/W2994598354","https://openalex.org/W3081203761","https://openalex.org/W3085985940","https://openalex.org/W3101158652","https://openalex.org/W3104667978","https://openalex.org/W3157999218","https://openalex.org/W3160274714","https://openalex.org/W3167334189","https://openalex.org/W4214502238","https://openalex.org/W4280535549","https://openalex.org/W4286893581","https://openalex.org/W4294558607","https://openalex.org/W4294646197","https://openalex.org/W4315746341","https://openalex.org/W6750254146","https://openalex.org/W6782272117","https://openalex.org/W6803361077"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W4246396837","https://openalex.org/W2482350142","https://openalex.org/W3176240006","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4288019534","https://openalex.org/W2293263892"],"abstract_inverted_index":{"Recent":[0],"studies":[1],"indicate":[2],"that":[3,165,190],"Graph":[4],"Neural":[5],"Networks":[6],"(GNNs)":[7],"are":[8,35,54,197],"vulnerable":[9],"to":[10,24,39,116,137,147,155],"adversarial":[11,101],"attacks.":[12],"Particularly,":[13],"adversarially":[14],"perturbing":[15],"the":[16,64,74,80,89,127,139,143,157,171,191],"graph":[17,50,122],"structure,":[18],"e.g.,":[19],"flipping":[20],"edges,":[21],"can":[22,168],"lead":[23],"salient":[25],"degeneration":[26],"of":[27,66,76,129,159,173,179],"GNNs\u2019":[28],"accuracy.":[29],"In":[30],"general,":[31],"efficiency":[32],"and":[33],"stealthiness":[34,65],"two":[36],"significant":[37],"metrics":[38],"evaluate":[40],"an":[41,111,134],"attack":[42,52,81,96],"method":[43,97,115,167,196],"in":[44,71,105],"practical":[45,60],"use.":[46,61],"However,":[47],"most":[48],"prevailing":[49],"structure-based":[51],"methods":[53],"query":[55],"intensive,":[56],"which":[57],"impacts":[58],"their":[59],"Furthermore,":[62],"while":[63],"perturbations":[67,140,192],"has":[68],"been":[69],"discussed":[70],"previous":[72],"studies,":[73],"majority":[75],"them":[77],"focus":[78],"on":[79,142],"scenario":[82],"targeting":[83],"a":[84,94,152,176,183],"single":[85],"node.":[86],"To":[87],"fill":[88],"research":[90],"gap,":[91],"we":[92,132,150,187],"present":[93],"global":[95],"against":[98],"GNNs,":[99],"Saturation":[100],"Attack":[102],"with":[103,175],"Meta-gradient,":[104],"this":[106],"article.":[107],"We":[108],"first":[109],"propose":[110],"enhanced":[112],"meta-learning-based":[113],"optimization":[114],"obtain":[117],"useful":[118],"gradient":[119],"information":[120],"concerning":[121],"structural":[123],"perturbations.":[124],"Then,":[125],"leveraging":[126],"notion":[128],"saturation":[130],"attack,":[131],"devise":[133],"effective":[135],"algorithm":[136],"determine":[138],"based":[141],"derived":[144],"meta-gradients.":[145],"Meanwhile,":[146],"ensure":[148],"stealthiness,":[149],"introduce":[151],"similarity":[153],"constraint":[154],"suppress":[156],"number":[158,178],"perturbed":[160],"edges.":[161],"Thorough":[162],"experiments":[163],"demonstrate":[164],"our":[166,195],"effectively":[169],"depreciate":[170],"accuracy":[172],"GNNs":[174],"small":[177],"queries.":[180],"While":[181],"achieving":[182],"higher":[184],"misclassification":[185],"rate,":[186],"also":[188],"show":[189],"developed":[193],"by":[194],"not":[198],"noticeable.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}