{"id":"https://openalex.org/W4415269786","doi":"https://doi.org/10.1145/3774904.3792284","title":"Unveiling the Vulnerability of Graph-LLMs: An Interpretable Multi-Dimensional Adversarial Attack on TAGs","display_name":"Unveiling the Vulnerability of Graph-LLMs: An Interpretable Multi-Dimensional Adversarial Attack on TAGs","publication_year":2026,"publication_date":"2026-04-09","ids":{"openalex":"https://openalex.org/W4415269786","doi":"https://doi.org/10.1145/3774904.3792284"},"language":"en","primary_location":{"id":"doi:10.1145/3774904.3792284","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774904.3792284","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2026","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3774904.3792284","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018923162","display_name":"Bowen Fan","orcid":"https://orcid.org/0009-0004-3763-2738"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bowen Fan","raw_affiliation_strings":["Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-3763-2738","affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhilin Guo","orcid":"https://orcid.org/0009-0009-9649-6015"},"institutions":[{"id":"https://openalex.org/I154099455","display_name":"Shandong University","ror":"https://ror.org/0207yh398","country_code":"CN","type":"education","lineage":["https://openalex.org/I154099455"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhilin Guo","raw_affiliation_strings":["Shandong University, Weihai, China"],"raw_orcid":"https://orcid.org/0009-0009-9649-6015","affiliations":[{"raw_affiliation_string":"Shandong University, Weihai, China","institution_ids":["https://openalex.org/I154099455"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028148241","display_name":"Xunkai Li","orcid":"https://orcid.org/0000-0002-1230-7603"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xunkai Li","raw_affiliation_strings":["Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1230-7603","affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yihan Zhou","orcid":"https://orcid.org/0009-0008-5670-3369"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yihan Zhou","raw_affiliation_strings":["Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0008-5670-3369","affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Bing Zhou","orcid":"https://orcid.org/0009-0008-5509-9702"},"institutions":[{"id":"https://openalex.org/I158809036","display_name":"Shenzhen Institute of Information Technology","ror":"https://ror.org/03wrf9427","country_code":"CN","type":"education","lineage":["https://openalex.org/I158809036"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bing Zhou","raw_affiliation_strings":["Shenzhen Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0009-0008-5509-9702","affiliations":[{"raw_affiliation_string":"Shenzhen Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I158809036"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhenjun Li","orcid":"https://orcid.org/0000-0003-4176-8879"},"institutions":[{"id":"https://openalex.org/I158809036","display_name":"Shenzhen Institute of Information Technology","ror":"https://ror.org/03wrf9427","country_code":"CN","type":"education","lineage":["https://openalex.org/I158809036"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenjun Li","raw_affiliation_strings":["Shenzhen Institute of Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-4176-8879","affiliations":[{"raw_affiliation_string":"Shenzhen Institute of Technology, Shenzhen, China","institution_ids":["https://openalex.org/I158809036"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100742465","display_name":"Ronghua Li","orcid":"https://orcid.org/0000-0002-3105-5325"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rong-Hua Li","raw_affiliation_strings":["Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3105-5325","affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054991337","display_name":"Guoren Wang","orcid":"https://orcid.org/0000-0002-0181-8379"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guoren Wang","raw_affiliation_strings":["Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0181-8379","affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2788","last_page":"2799"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9718000292778015,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9718000292778015,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.8303999900817871},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6661999821662903},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.4510999917984009},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4120999872684479},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.4002000093460083},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.38830000162124634},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.35109999775886536},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.3167000114917755}],"concepts":[{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.8303999900817871},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7694000005722046},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6661999821662903},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4510999917984009},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4120999872684479},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4023999869823456},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4002000093460083},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.38830000162124634},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3691999912261963},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3650999963283539},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.35109999775886536},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.34360000491142273},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.3167000114917755},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.3151000142097473},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.31439998745918274},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3125},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2865000069141388},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.27570000290870667},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.27469998598098755},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2685999870300293},{"id":"https://openalex.org/C90734943","wikidata":"https://www.wikidata.org/wiki/Q17008777","display_name":"Conceptualization","level":2,"score":0.26820001006126404},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.26600000262260437},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2655999958515167},{"id":"https://openalex.org/C195818886","wikidata":"https://www.wikidata.org/wiki/Q5421724","display_name":"Expressive power","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.25380000472068787},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3774904.3792284","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774904.3792284","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2026","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2510.12233","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.12233","pdf_url":"https://arxiv.org/pdf/2510.12233","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2510.12233","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2510.12233","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3774904.3792284","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774904.3792284","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Graph":[0,91],"Neural":[1],"Networks":[2],"(GNNs)":[3],"have":[4,65],"become":[5],"a":[6,14,80,94,121],"pivotal":[7],"framework":[8,96],"for":[9,68,164],"modeling":[10],"graph-structured":[11],"data,":[12],"enabling":[13,120],"wide":[15],"range":[16],"of":[17,47,70,124],"applications":[18],"from":[19],"social":[20],"network":[21],"analysis":[22,130],"to":[23,112,150],"molecular":[24],"chemistry.":[25],"By":[26,153],"integrating":[27],"large":[28],"language":[29],"models":[30],"(LLMs),":[31],"text-attributed":[32],"graphs":[33],"(TAGs)":[34],"enhance":[35],"node":[36],"representations":[37],"with":[38],"rich":[39],"textual":[40,104],"semantics,":[41],"significantly":[42],"boosting":[43],"the":[44,88],"expressive":[45],"power":[46],"graph-based":[48],"learning.":[49],"However,":[50],"this":[51,84],"synergy":[52],"introduces":[53],"critical":[54],"vulnerabilities":[55],"in":[56],"both":[57],"topology":[58],"and":[59,103,118,131,138,147],"text.":[60],"Although":[61],"specialized":[62],"attack":[63,144],"methods":[64],"been":[66],"designed":[67],"each":[69],"these":[71,155],"aspects,":[72],"no":[73],"work":[74,160],"has":[75],"yet":[76],"unified":[77],"them":[78],"into":[79],"comprehensive":[81,132],"approach.":[82],"In":[83],"work,":[85],"we":[86],"propose":[87],"Interpretable":[89],"Multi-Dimensional":[90],"Attack":[92],"(IMDGA),":[93],"human-centric":[95],"orchestrating":[97],"multi-level":[98],"perturbations":[99],"across":[100],"graph":[101],"structure":[102],"features.":[105],"IMDGA":[106,140],"utilizes":[107],"three":[108],"tightly":[109],"integrated":[110],"modules":[111],"craft":[113],"attacks":[114],"that":[115],"balance":[116],"interpretability":[117],"impact,":[119],"deeper":[122],"understanding":[123],"Graph-LLM":[125,166],"vulnerabilities.":[126],"Through":[127],"rigorous":[128],"theoretical":[129],"empirical":[133],"evaluations":[134],"on":[135],"diverse":[136],"datasets":[137],"architectures,":[139],"demonstrates":[141],"superior":[142],"interpretability,":[143],"effectiveness,":[145],"stealthiness,":[146],"robustness":[148],"compared":[149],"existing":[151],"methods.":[152],"exposing":[154],"underexplored":[156],"semantic":[157],"vulnerabilities,":[158],"our":[159],"offers":[161],"valuable":[162],"insights":[163],"improving":[165],"resilience.":[167],"Our":[168],"code":[169],"is":[170],"available":[171],"at":[172],"https://github.com/bwfan-bit/IMDGA.":[173]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-17T00:00:00"}