{"id":"https://openalex.org/W4412876931","doi":"https://doi.org/10.1145/3711896.3736845","title":"Are You Using Reliable Graph Prompts? Trojan Prompt Attacks on Graph Neural Networks","display_name":"Are You Using Reliable Graph Prompts? Trojan Prompt Attacks on Graph Neural Networks","publication_year":2025,"publication_date":"2025-08-03","ids":{"openalex":"https://openalex.org/W4412876931","doi":"https://doi.org/10.1145/3711896.3736845"},"language":"en","primary_location":{"id":"doi:10.1145/3711896.3736845","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3711896.3736845","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3711896.3736845","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.2","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3711896.3736845","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039804358","display_name":"Minhua Lin","orcid":"https://orcid.org/0000-0003-1591-7172"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Minhua Lin","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0000-0003-1591-7172","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085548702","display_name":"Zhiwei Zhang","orcid":"https://orcid.org/0009-0007-6153-2739"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiwei Zhang","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0009-0007-6153-2739","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091395218","display_name":"Enyan Dai","orcid":"https://orcid.org/0000-0001-9715-0280"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Enyan Dai","raw_affiliation_strings":["Hong Kong University of Science and Technology (Guangzhou), Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-9715-0280","affiliations":[{"raw_affiliation_string":"Hong Kong University of Science and Technology (Guangzhou), Guangzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053341638","display_name":"Zongyu Wu","orcid":"https://orcid.org/0009-0001-8378-7632"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zongyu Wu","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0009-0001-8378-7632","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102784377","display_name":"Yilong Wang","orcid":"https://orcid.org/0009-0009-2851-3055"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yilong Wang","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0009-0009-2851-3055","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060725887","display_name":"X. D. Zhang","orcid":"https://orcid.org/0000-0003-0940-6595"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiang Zhang","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0000-0003-0940-6595","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011048500","display_name":"Suhang Wang","orcid":"https://orcid.org/0000-0003-3448-4878"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suhang Wang","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0000-0003-3448-4878","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.08504086,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1729","last_page":"1740"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.8143820762634277},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.709478497505188},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5310519337654114},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4795234501361847},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.31800925731658936}],"concepts":[{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.8143820762634277},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.709478497505188},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5310519337654114},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4795234501361847},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.31800925731658936}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3711896.3736845","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3711896.3736845","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3711896.3736845","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.2","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3711896.3736845","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3711896.3736845","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3711896.3736845","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.2","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3798446836","display_name":null,"funder_award_id":"17STCIN00001-05-00","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"},{"id":"https://openalex.org/G4150318782","display_name":null,"funder_award_id":"17STCIN00001","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"},{"id":"https://openalex.org/G7452299184","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"}],"funders":[{"id":"https://openalex.org/F4320306110","display_name":"U.S. Department of Homeland Security","ror":"https://ror.org/00jyr0d86"},{"id":"https://openalex.org/F4320307791","display_name":"Cisco Systems","ror":"https://ror.org/03yt1ez60"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412876931.pdf","grobid_xml":"https://content.openalex.org/works/W4412876931.grobid-xml"},"referenced_works_count":43,"referenced_works":["https://openalex.org/W2807021761","https://openalex.org/W2914721378","https://openalex.org/W2990138404","https://openalex.org/W3009901425","https://openalex.org/W3098267758","https://openalex.org/W3099064659","https://openalex.org/W3100848837","https://openalex.org/W3110791298","https://openalex.org/W3117178429","https://openalex.org/W3167334189","https://openalex.org/W3173777717","https://openalex.org/W3185341429","https://openalex.org/W3207981989","https://openalex.org/W4214868967","https://openalex.org/W4221023051","https://openalex.org/W4221143046","https://openalex.org/W4290877635","https://openalex.org/W4323066547","https://openalex.org/W4367046771","https://openalex.org/W4383468961","https://openalex.org/W4385562529","https://openalex.org/W4385571591","https://openalex.org/W4386231783","https://openalex.org/W4387432660","https://openalex.org/W4389520490","https://openalex.org/W4391901119","https://openalex.org/W4392384460","https://openalex.org/W4393147197","https://openalex.org/W4393147838","https://openalex.org/W4393161233","https://openalex.org/W4396757552","https://openalex.org/W4400033035","https://openalex.org/W4400111732","https://openalex.org/W4401856690","https://openalex.org/W4401856724","https://openalex.org/W4401857377","https://openalex.org/W4401864009","https://openalex.org/W4403780544","https://openalex.org/W4403791639","https://openalex.org/W4409657319","https://openalex.org/W6601323341","https://openalex.org/W6629267907","https://openalex.org/W6857617495"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4253721122","https://openalex.org/W1671033612","https://openalex.org/W4389527383","https://openalex.org/W4206524843","https://openalex.org/W2139923244","https://openalex.org/W2237899707","https://openalex.org/W576137284"],"abstract_inverted_index":{"Graph":[0],"Prompt":[1],"Learning":[2],"(GPL)":[3],"has":[4,37],"been":[5,38],"introduced":[6],"as":[7,76],"a":[8,106,145],"promising":[9],"approach":[10,71,148],"that":[11,149],"uses":[12],"prompts":[13,119],"to":[14,19,40,43],"adapt":[15],"pre-trained":[16,122],"GNN":[17,77,123,180],"models":[18,92,177],"specific":[20],"downstream":[21,85,158],"tasks":[22],"without":[23,120],"requiring":[24],"fine-tuning":[25,140],"of":[26,33,138,153,172],"the":[27,31,51,98,136,151,154,170],"entire":[28],"model.":[29],"Despite":[30],"advantages":[32],"GPL,":[34],"little":[35],"attention":[36],"given":[39],"its":[41],"vulnerability":[42],"backdoor":[44,60,107,155],"attacks,":[45],"where":[46],"an":[47],"adversary":[48],"can":[49],"manipulate":[50],"model's":[52],"behavior":[53],"by":[54,141],"embedding":[55],"hidden":[56],"triggers.":[57],"Existing":[58],"graph":[59,118],"attacks":[61],"rely":[62],"on":[63,93,163],"modifying":[64,121],"model":[65,139,159],"parameters":[66,79],"during":[67],"training,":[68],"but":[69],"this":[70,101],"is":[72],"impractical":[73],"in":[74,174],"GPL":[75,176],"encoder":[78],"are":[80],"frozen":[81],"after":[82,157],"pre-training.":[83],"Moreover,":[84],"users":[86],"may":[87],"fine-tune":[88],"their":[89],"own":[90],"task":[91],"clean":[94,132],"datasets,":[95],"further":[96],"complicating":[97],"attack.":[99],"In":[100],"paper,":[102],"we":[103,143],"propose":[104],"TGPA,":[105],"attack":[108,128],"framework":[109],"designed":[110],"specifically":[111],"for":[112],"GPL.":[113],"TGPA":[114,173],"injects":[115],"backdoors":[116],"into":[117],"encoders":[124],"and":[125,131],"ensures":[126],"high":[127],"success":[129],"rates":[130],"accuracy.":[133],"To":[134],"address":[135],"challenge":[137],"users,":[142],"introduce":[144],"finetuning-resistant":[146],"poisoning":[147],"maintains":[150],"effectiveness":[152,171],"even":[156],"adjustments.":[160],"Extensive":[161],"experiments":[162],"multiple":[164],"datasets":[165],"under":[166],"various":[167],"settings":[168],"demonstrate":[169],"compromising":[175],"with":[178],"fixed":[179],"encoders.":[181]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}