{"id":"https://openalex.org/W7129090766","doi":"https://doi.org/10.1145/3773966.3777924","title":"SoftHist: Teaching Graph Injection Attackers to Camouflage with Memory","display_name":"SoftHist: Teaching Graph Injection Attackers to Camouflage with Memory","publication_year":2026,"publication_date":"2026-02-16","ids":{"openalex":"https://openalex.org/W7129090766","doi":"https://doi.org/10.1145/3773966.3777924"},"language":null,"primary_location":{"id":"doi:10.1145/3773966.3777924","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3773966.3777924","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Nineteenth ACM International Conference on Web Search and Data Mining","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3773966.3777924","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126120620","display_name":"Yidong Jiang","orcid":null},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yidong Jiang","raw_affiliation_strings":["Department of Computer Science and Technology, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0000-4033-8709","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126098252","display_name":"Ziwen Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziwen Xu","raw_affiliation_strings":["Department of Computer Science and Technology, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0008-4440-2227","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Linbo Shao","orcid":"https://orcid.org/0009-0009-2092-6461"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Linbo Shao","raw_affiliation_strings":["Department of Computer Science and Technology, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0009-2092-6461","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Peng Zhu","orcid":"https://orcid.org/0000-0001-9558-3787"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Zhu","raw_affiliation_strings":["Department of Computer Science and Technology, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-9558-3787","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5112386538","display_name":"Dawei Cheng","orcid":null},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dawei Cheng","raw_affiliation_strings":["Department of Computer Science and Technology, Tongji University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-5877-7387","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I116953780"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.12887009,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"282","last_page":"292"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.7763000130653381,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.7763000130653381,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.18289999663829803,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.006800000090152025,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/camouflage","display_name":"Camouflage","score":0.6294000148773193},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.5490999817848206},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5149000287055969},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.4657000005245209},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.44449999928474426},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4104999899864197},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.3977000117301941},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.3880999982357025},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.37549999356269836},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.3698999881744385}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7753999829292297},{"id":"https://openalex.org/C2776196576","wikidata":"https://www.wikidata.org/wiki/Q196113","display_name":"Camouflage","level":2,"score":0.6294000148773193},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.5490999817848206},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5149000287055969},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4936000108718872},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4771000146865845},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.4657000005245209},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.44449999928474426},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4104999899864197},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3977000117301941},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.390500009059906},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.3880999982357025},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.37549999356269836},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3698999881744385},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3686000108718872},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.357699990272522},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.3467000126838684},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3465000092983246},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.34290000796318054},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.32019999623298645},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.3133000135421753},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3109999895095825},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.289900004863739},{"id":"https://openalex.org/C2781133158","wikidata":"https://www.wikidata.org/wiki/Q1088669","display_name":"Survivability","level":2,"score":0.2784999907016754},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.2784000039100647},{"id":"https://openalex.org/C2779545769","wikidata":"https://www.wikidata.org/wiki/Q5135364","display_name":"Closeness","level":2,"score":0.27720001339912415},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2761000096797943},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.274399995803833},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.2667999863624573},{"id":"https://openalex.org/C75564084","wikidata":"https://www.wikidata.org/wiki/Q5597085","display_name":"Graph embedding","level":3,"score":0.2621999979019165},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.2590000033378601},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.2578999996185303},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.25200000405311584}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3773966.3777924","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3773966.3777924","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Nineteenth ACM International Conference on Web Search and Data Mining","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3773966.3777924","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3773966.3777924","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Nineteenth ACM International Conference on Web Search and Data Mining","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.823212206363678,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W2027731328","https://openalex.org/W2153959628","https://openalex.org/W2803831897","https://openalex.org/W2949208225","https://openalex.org/W2963857521","https://openalex.org/W2964971928","https://openalex.org/W3089258356","https://openalex.org/W3169666998","https://openalex.org/W3170068709","https://openalex.org/W3198375173","https://openalex.org/W4226237846","https://openalex.org/W4382240025","https://openalex.org/W4389331495","https://openalex.org/W4391807422","https://openalex.org/W4392384324","https://openalex.org/W4393147361","https://openalex.org/W4393159631","https://openalex.org/W4393160468","https://openalex.org/W4400909917","https://openalex.org/W4403004898","https://openalex.org/W4403600947","https://openalex.org/W4403724410","https://openalex.org/W4404390753","https://openalex.org/W4405844909","https://openalex.org/W4409365476","https://openalex.org/W4409671192"],"related_works":[],"abstract_inverted_index":{"Graph":[0],"Neural":[1],"Networks":[2],"(GNNs)":[3],"have":[4],"achieved":[5],"notable":[6],"success":[7,212],"in":[8,31,86,184],"a":[9,113,127,145,150],"wide":[10],"range":[11],"of":[12,74],"applications.":[13],"However,":[14],"their":[15,29,38],"vulnerability":[16],"to":[17,51,60,131],"adversarial":[18,82],"attacks,":[19],"particularly":[20],"graph":[21,75,121],"injection":[22,122],"attacks":[23],"(GIAs),":[24],"raises":[25],"serious":[26],"concerns":[27],"for":[28,79,119,159],"deployment":[30],"security-sensitive":[32],"domains.":[33],"Existing":[34],"GIA":[35],"methods,":[36],"despite":[37],"demonstrated":[39],"effectiveness,":[40,167],"face":[41],"several":[42],"inherent":[43],"limitations.":[44],"They":[45],"typically":[46],"require":[47],"training":[48],"surrogate":[49,65],"models":[50,205],"approximate":[52],"the":[53,64,67,71,193],"victim":[54],"model's":[55],"behavior,":[56],"which":[57],"may":[58],"lead":[59],"performance":[61],"degradation":[62],"when":[63,97],"mismatches":[66],"target":[68],"model.":[69],"Furthermore,":[70],"discrete":[72],"nature":[73],"data":[76],"poses":[77],"challenges":[78],"generating":[80],"effective":[81],"features,":[83],"often":[84],"resulting":[85],"suboptimal":[87,133],"solutions.":[88],"Most":[89],"critically,":[90],"these":[91,108],"methods":[92,216],"show":[93],"markedly":[94],"reduced":[95],"effectiveness":[96],"deployed":[98],"against":[99,171],"defended":[100],"GNN":[101],"models,":[102],"limiting":[103],"real-world":[104],"applicability.":[105],"To":[106],"address":[107],"challenges,":[109],"we":[110,143],"introduce":[111],"SoftHist,":[112],"novel":[114],"gradient-free":[115],"reinforcement":[116],"learning":[117],"framework":[118],"black-box":[120],"attacks.":[123],"Our":[124],"approach":[125],"incorporates":[126],"softened":[128],"embedding":[129],"mechanism":[130],"avoid":[132],"feature":[134],"generation,":[135],"ensuring":[136],"stable":[137],"and":[138,149,169],"stealthy":[139],"node":[140],"injection.":[141],"Moreover,":[142],"design":[144],"topology-aware":[146],"edge":[147],"sampler":[148],"defense-aware":[151],"policy":[152],"learner":[153],"with":[154],"adaptive":[155],"history":[156],"reuse":[157],"optimized":[158],"misclassification":[160,194],"maximization.":[161],"These":[162],"innovations":[163],"collectively":[164],"balance":[165],"attack":[166],"stealthiness,":[168],"robustness":[170],"defensive":[172,204],"measures.":[173],"Extensive":[174],"experiments":[175],"on":[176],"eight":[177],"benchmark":[178],"datasets":[179,190],"demonstrate":[180],"SoftHist's":[181],"significant":[182],"advantages":[183],"key":[185],"scenarios:":[186],"(1)":[187],"On":[188],"discrete-feature":[189],"like":[191],"AMComputer,":[192],"rate":[195],"is":[196],"10.34%~38.09%":[197],"higher":[198],"than":[199],"baseline":[200],"methods;":[201],"(2)":[202],"Against":[203],"such":[206],"as":[207],"RGCN,":[208],"it":[209],"maintains":[210],"98.23%":[211],"rate,":[213],"surpassing":[214],"state-of-the-art":[215],"by":[217],"12.36%.":[218]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-02-17T00:00:00"}