{"id":"https://openalex.org/W4409657471","doi":"https://doi.org/10.1145/3696410.3714665","title":"SPEAR: A Structure-Preserving Manipulation Method for Graph Backdoor Attacks","display_name":"SPEAR: A Structure-Preserving Manipulation Method for Graph Backdoor Attacks","publication_year":2025,"publication_date":"2025-04-22","ids":{"openalex":"https://openalex.org/W4409657471","doi":"https://doi.org/10.1145/3696410.3714665"},"language":"en","primary_location":{"id":"doi:10.1145/3696410.3714665","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3696410.3714665","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3696410.3714665","source":null,"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Web Conference 2025","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3696410.3714665","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020975264","display_name":"Yuanhao Ding","orcid":null},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuanhao Ding","raw_affiliation_strings":["Key Laboratory of AI Safety, Chinese Academy of Sciences, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China and University of Chinese Academy of Sciences, CAS, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0006-2416-8010","affiliations":[{"raw_affiliation_string":"Key Laboratory of AI Safety, Chinese Academy of Sciences, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China and University of Chinese Academy of Sciences, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210090176","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053677879","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0002-1525-0788"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Key Laboratory of AI Safety, Chinese Academy of Sciences, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1525-0788","affiliations":[{"raw_affiliation_string":"Key Laboratory of AI Safety, Chinese Academy of Sciences, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074614306","display_name":"Yugang Ji","orcid":"https://orcid.org/0009-0002-4824-9684"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yugang Ji","raw_affiliation_strings":["Individual Researcher, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0002-4824-9684","affiliations":[{"raw_affiliation_string":"Individual Researcher, Hangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061319743","display_name":"Weigao Wen","orcid":"https://orcid.org/0000-0002-4597-6053"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Weigao Wen","raw_affiliation_strings":["Individual Researcher, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4597-6053","affiliations":[{"raw_affiliation_string":"Individual Researcher, Hangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100734672","display_name":"Qing He","orcid":"https://orcid.org/0000-0001-8833-5398"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qing He","raw_affiliation_strings":["Key Laboratory of AI Safety, Chinese Academy of Sciences, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China and University of Chinese Academy of Sciences, CAS, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8833-5398","affiliations":[{"raw_affiliation_string":"Key Laboratory of AI Safety, Chinese Academy of Sciences, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China and University of Chinese Academy of Sciences, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210090176","https://openalex.org/I4210165038"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068007462","display_name":"Xiang Ao","orcid":"https://orcid.org/0000-0001-9633-8361"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Ao","raw_affiliation_strings":["Key Laboratory of AI Safety, Chinese Academy of Sciences, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, University of Chinese Academy of Sciences, CAS, Beijing, China, and Institute of Intelligent Computing Technology, CAS, Suzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-9633-8361","affiliations":[{"raw_affiliation_string":"Key Laboratory of AI Safety, Chinese Academy of Sciences, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, University of Chinese Academy of Sciences, CAS, Beijing, China, and Institute of Intelligent Computing Technology, CAS, Suzhou, China","institution_ids":["https://openalex.org/I4210090176","https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.3229,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.97659186,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1237","last_page":"1247"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9449724555015564},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6704428791999817},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3801700174808502},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.34698134660720825}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9449724555015564},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6704428791999817},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3801700174808502},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.34698134660720825}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3696410.3714665","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3696410.3714665","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3696410.3714665","source":null,"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Web Conference 2025","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3696410.3714665","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3696410.3714665","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3696410.3714665","source":null,"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Web Conference 2025","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7215966912","display_name":null,"funder_award_id":"20230484430","funder_id":"https://openalex.org/F4320334978","funder_display_name":"Beijing Nova Program"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334978","display_name":"Beijing Nova Program","ror":"https://ror.org/034k14f91"},{"id":"https://openalex.org/F4320335561","display_name":"Institute of Computing Technology, Chinese Academy of Sciences","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409657471.pdf","grobid_xml":"https://content.openalex.org/works/W4409657471.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W2101491865","https://openalex.org/W2788919350","https://openalex.org/W2803831897","https://openalex.org/W2907492528","https://openalex.org/W2908442265","https://openalex.org/W2914721378","https://openalex.org/W2942091739","https://openalex.org/W2949208225","https://openalex.org/W2990138404","https://openalex.org/W3014139564","https://openalex.org/W3014290757","https://openalex.org/W3028525609","https://openalex.org/W3038342492","https://openalex.org/W3042856524","https://openalex.org/W3098276446","https://openalex.org/W3110933132","https://openalex.org/W3167334189","https://openalex.org/W3198375173","https://openalex.org/W3206093631","https://openalex.org/W3208322257","https://openalex.org/W4224319742","https://openalex.org/W4283811662","https://openalex.org/W4290943483","https://openalex.org/W4295921726","https://openalex.org/W4321434205","https://openalex.org/W4323066547","https://openalex.org/W4323655037","https://openalex.org/W4385565521","https://openalex.org/W4392384460","https://openalex.org/W4398157294","https://openalex.org/W4401856709","https://openalex.org/W6601897980","https://openalex.org/W6757925611","https://openalex.org/W6820618299"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4320031223","https://openalex.org/W4200629851","https://openalex.org/W4281902577","https://openalex.org/W4309417370","https://openalex.org/W4292107232","https://openalex.org/W3009072493","https://openalex.org/W4401407399"],"abstract_inverted_index":{"Graph":[0],"Neural":[1],"Networks":[2],"(GNNs)":[3],"are":[4,22],"vulnerable":[5],"to":[6,14,24,43,47,106],"backdoor":[7,20,45,65,159],"attacks,":[8],"where":[9],"adversaries":[10],"implant":[11],"malicious":[12],"triggers":[13,46,88],"manipulate":[15],"model":[16],"predictions.":[17],"Existing":[18],"graph":[19,56,64],"attacks":[21],"susceptible":[23],"defense":[25],"mechanisms":[26],"or":[27,36],"robust":[28],"classifiers":[29],"because":[30],"they":[31],"rely":[32],"on":[33,149],"subgraph":[34],"injection":[35],"structural":[37],"perturbations,":[38],"e.g.,":[39],"creating":[40],"additional":[41],"edges":[42],"attach":[44],"the":[48,53,70,87,118],"original":[49],"graph.":[50],"To":[51],"enhance":[52],"stealthiness":[54,124],"of":[55],"backdoors,":[57],"we":[58],"propose":[59],"SPEAR,":[60],"a":[61,76,93,100,108,133,155],"novel":[62],"structure-preserving":[63],"attack":[66,78,110,160],"that":[67,141],"avoids":[68],"modifying":[69],"graph's":[71],"topology.":[72],"SPEAR":[73,120,142],"operates":[74],"within":[75],"limited":[77],"budget":[79],"by":[80,113,125],"selectively":[81],"perturbing":[82],"node":[83],"attributes":[84],"while":[85],"ensuring":[86],"exert":[89],"significant":[90],"influence":[91],"through":[92],"global":[94],"importance-driven":[95],"feature":[96],"selection":[97],"strategy.":[98],"Additionally,":[99],"neighborhood-aware":[101],"trigger":[102,135],"generator":[103],"is":[104,165],"employed":[105],"underpin":[107],"high":[109],"success":[111],"rate":[112],"utilizing":[114],"semantic":[115],"information":[116],"from":[117],"neighborhood.":[119],"amplifies":[121],"effectiveness":[122,145],"and":[123,157],"combining":[126],"subtle":[127],"yet":[128],"impactful":[129],"attribute":[130],"manipulation":[131],"with":[132],"refined":[134],"generation":[136],"mechanism.":[137],"Extensive":[138],"experiments":[139],"demonstrate":[140],"achieves":[143],"state-of-the-art":[144],"in":[146],"bypassing":[147],"defenses":[148],"real-world":[150],"datasets,":[151],"establishing":[152],"it":[153],"as":[154],"potent":[156],"stealthy":[158],"for":[161],"graph-based":[162],"tasks.":[163],"Code":[164],"available":[166],"at":[167],"https://github.com/yhDing/SPEAR.":[168]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2025-10-10T00:00:00"}