{"id":"https://openalex.org/W4414359995","doi":"https://doi.org/10.24963/ijcai.2025/311","title":"Exploiting Self-Refining Normal Graph Structures for Robust Defense against Unsupervised Adversarial Attacks","display_name":"Exploiting Self-Refining Normal Graph Structures for Robust Defense against Unsupervised Adversarial Attacks","publication_year":2025,"publication_date":"2025-09-01","ids":{"openalex":"https://openalex.org/W4414359995","doi":"https://doi.org/10.24963/ijcai.2025/311"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2025/311","is_oa":false,"landing_page_url":"https://doi.org/10.24963/ijcai.2025/311","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5112948377","display_name":"Bingdao Feng","orcid":null},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bingdao Feng","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112574959","display_name":"Di Jin","orcid":"https://orcid.org/0000-0002-9587-1698"},"institutions":[{"id":"https://openalex.org/I116265982","display_name":"Qinghai University","ror":"https://ror.org/05h33bt13","country_code":"CN","type":"education","lineage":["https://openalex.org/I116265982"]},{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Di Jin","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University","Key Laboratory of Artificial Intelligence Application Technology, Qinghai Minzu University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University","institution_ids":["https://openalex.org/I162868743"]},{"raw_affiliation_string":"Key Laboratory of Artificial Intelligence Application Technology, Qinghai Minzu University","institution_ids":["https://openalex.org/I116265982"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103015888","display_name":"Xiaobao Wang","orcid":"https://orcid.org/0000-0001-5086-4964"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaobao Wang","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University","Guangdong Laboratory of Artificial Intelligence and Digital Economy (SZ)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University","institution_ids":["https://openalex.org/I162868743"]},{"raw_affiliation_string":"Guangdong Laboratory of Artificial Intelligence and Digital Economy (SZ)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009013876","display_name":"Dongxiao He","orcid":"https://orcid.org/0000-0002-1915-4179"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongxiao He","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035953000","display_name":"Jingyi Cao","orcid":"https://orcid.org/0000-0002-5754-9016"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingyi Cao","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University","institution_ids":["https://openalex.org/I162868743"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034886825","display_name":"Zhen Wang","orcid":"https://orcid.org/0000-0001-7407-5118"},"institutions":[{"id":"https://openalex.org/I17145004","display_name":"Northwestern Polytechnical University","ror":"https://ror.org/01y0j0j86","country_code":"CN","type":"education","lineage":["https://openalex.org/I17145004"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Wang","raw_affiliation_strings":["School of Cybersecurity, Northwestern Polytechnical University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cybersecurity, Northwestern Polytechnical University","institution_ids":["https://openalex.org/I17145004"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2793","last_page":"2801"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9911999702453613,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6444000005722046},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.557699978351593},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5271000266075134},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.4984999895095825},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.4009000062942505},{"id":"https://openalex.org/keywords/unsupervised-learning","display_name":"Unsupervised learning","score":0.3174000084400177}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6565999984741211},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6444000005722046},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.557699978351593},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5271000266075134},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.4984999895095825},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4507000148296356},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4187000095844269},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4009000062942505},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3700000047683716},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.3174000084400177},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2994000017642975},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.27399998903274536},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C167750561","wikidata":"https://www.wikidata.org/wiki/Q1789512","display_name":"Critical graph","level":5,"score":0.26170000433921814},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.257999986410141},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.24963/ijcai.2025/311","is_oa":false,"landing_page_url":"https://doi.org/10.24963/ijcai.2025/311","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Defending":[0],"against":[1,159],"adversarial":[2,160],"attacks":[3,161],"on":[4,91,125,144],"graphs":[5,36,78],"has":[6],"become":[7,53],"increasingly":[8],"important.":[9],"Graph":[10,111],"refinement":[11,41],"to":[12,43,52,60,79,94,129],"enhance":[13],"the":[14,47,57,110,121,126,131,134,139],"quality":[15],"and":[16,137,162],"robustness":[17],"of":[18,49,103,133],"representation":[19,123],"learning":[20,73,93],"is":[21],"a":[22,69,96,100,115],"critical":[23],"area":[24],"that":[25,31,45,75,119,149],"requires":[26],"thorough":[27],"investigation.":[28],"We":[29],"observe":[30],"representations":[32],"learned":[33,140],"from":[34],"attacked":[35],"are":[37],"often":[38],"ineffective":[39],"for":[40],"due":[42],"perturbations":[44],"cause":[46],"endpoints":[48],"perturbed":[50,104],"edges":[51],"more":[54],"similar,":[55],"complicating":[56],"defender's":[58],"ability":[59],"distinguish":[61],"them.":[62],"To":[63],"address":[64],"this":[65],"challenge,":[66],"we":[67,84,107],"propose":[68,109],"robust":[70],"unsupervised":[71],"graph":[72,98,128,136],"framework":[74],"utilizes":[76],"cleaner":[77],"learn":[80],"effective":[81],"representations.":[82,141],"Specifically,":[83],"introduce":[85],"an":[86],"anomaly":[87],"detection":[88],"model":[89],"based":[90],"contrastive":[92],"obtain":[95],"rough":[97,127],"excluding":[99],"large":[101],"number":[102],"structures.":[105],"Subsequently,":[106],"then":[108],"Pollution":[112],"Degree":[113],"(GPD),":[114],"mutual":[116],"information-based":[117],"measure":[118],"leverages":[120],"encoder's":[122],"capability":[124],"assess":[130],"trustworthiness":[132],"predicted":[135],"refine":[138],"Extensive":[142],"experiments":[143],"four":[145],"benchmark":[146],"datasets":[147],"demonstrate":[148],"our":[150],"method":[151],"outperforms":[152],"nine":[153],"state-of-the-art":[154],"defense":[155],"models,":[156],"effectively":[157],"defending":[158],"enhancing":[163],"node":[164],"classification":[165],"performance.":[166]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}