{"id":"https://openalex.org/W6891768566","doi":"https://doi.org/10.4233/uuid:a7481bf6-9a7a-4964-9010-eee4ec058273","title":"Connecting the dots","display_name":"Connecting the dots","publication_year":2024,"publication_date":"2024-05-07","ids":{"openalex":"https://openalex.org/W6891768566","doi":"https://doi.org/10.4233/uuid:a7481bf6-9a7a-4964-9010-eee4ec058273"},"language":"en","primary_location":{"id":"pmh:oai:tudelft.nl:uuid:a7481bf6-9a7a-4964-9010-eee4ec058273","is_oa":false,"landing_page_url":"http://resolver.tudelft.nl/uuid:a7481bf6-9a7a-4964-9010-eee4ec058273","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"doctoral thesis"},"type":"dissertation","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.4233/uuid:a7481bf6-9a7a-4964-9010-eee4ec058273","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Xu, J.","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Xu, J.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.397599995136261,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.397599995136261,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.31450000405311584,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.2320999950170517,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9980999827384949},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.37560001015663147},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.3686000108718872},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.3481999933719635},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.34470000863075256},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.33550000190734863}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9980999827384949},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6241999864578247},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43320000171661377},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3831999897956848},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.37560001015663147},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.3686000108718872},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3481999933719635},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.34470000863075256},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.33550000190734863},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.3208000063896179},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.31949999928474426},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.28780001401901245},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.28769999742507935},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.23680000007152557},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.21320000290870667},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.210999995470047},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.20659999549388885},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.1875},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.1826000064611435},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.17970000207424164},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.16979999840259552},{"id":"https://openalex.org/C2987255567","wikidata":"https://www.wikidata.org/wiki/Q33002955","display_name":"Knowledge graph","level":2,"score":0.16979999840259552},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.16820000112056732},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.16660000383853912},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1664000004529953},{"id":"https://openalex.org/C67226441","wikidata":"https://www.wikidata.org/wiki/Q1665389","display_name":"Robust statistics","level":3,"score":0.16500000655651093},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.163100004196167},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.16120000183582306},{"id":"https://openalex.org/C164680029","wikidata":"https://www.wikidata.org/wiki/Q1055293","display_name":"Multiple","level":2,"score":0.15889999270439148},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.15680000185966492},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.15639999508857727},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.15459999442100525},{"id":"https://openalex.org/C83893233","wikidata":"https://www.wikidata.org/wiki/Q662806","display_name":"Dike","level":2,"score":0.15299999713897705},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.1453000009059906},{"id":"https://openalex.org/C21080849","wikidata":"https://www.wikidata.org/wiki/Q13611879","display_name":"Data point","level":2,"score":0.14499999582767487},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.14159999787807465},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.1395999938249588},{"id":"https://openalex.org/C132010649","wikidata":"https://www.wikidata.org/wiki/Q189222","display_name":"Intuition","level":2,"score":0.13490000367164612},{"id":"https://openalex.org/C75294576","wikidata":"https://www.wikidata.org/wiki/Q5165192","display_name":"Contextual image classification","level":3,"score":0.13199999928474426},{"id":"https://openalex.org/C76444178","wikidata":"https://www.wikidata.org/wiki/Q72897900","display_name":"Connectivity","level":3,"score":0.13189999759197235}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:tudelft.nl:uuid:a7481bf6-9a7a-4964-9010-eee4ec058273","is_oa":false,"landing_page_url":"http://resolver.tudelft.nl/uuid:a7481bf6-9a7a-4964-9010-eee4ec058273","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"doctoral thesis"},{"id":"doi:10.4233/uuid:a7481bf6-9a7a-4964-9010-eee4ec058273","is_oa":true,"landing_page_url":"https://doi.org/10.4233/uuid:a7481bf6-9a7a-4964-9010-eee4ec058273","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Dissertation"}],"best_oa_location":{"id":"doi:10.4233/uuid:a7481bf6-9a7a-4964-9010-eee4ec058273","is_oa":true,"landing_page_url":"https://doi.org/10.4233/uuid:a7481bf6-9a7a-4964-9010-eee4ec058273","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dissertation"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Deep":[0],"Neural":[1,105],"Networks":[2,106],"(DNNs)":[3],"have":[4,113,152],"found":[5],"extensive":[6],"applications":[7],"across":[8],"diverse":[9],"fields,":[10],"such":[11],"as":[12,89,102],"image":[13,158],"classification,":[14],"speech":[15],"recognition,":[16],"and":[17,176,197,242,309,361],"natural":[18],"language":[19],"processing.":[20],"However,":[21],"their":[22,122],"susceptibility":[23],"to":[24,43,68,84,126,132,138,170,235,255,262,367],"various":[25],"adversarial":[26],"attacks,":[27,134],"notably":[28],"the":[29,51,56,59,111,157,166,171,207,214,237,240,257,266,291,294,302,326,354,363],"backdoor":[30,40,133,150,188,199,215,251,273,311,319,330,347,357],"attack,":[31],"has":[32],"repeatedly":[33],"been":[34,153],"demonstrated":[35,114],"in":[36,77,117,146,156,278,290],"recent":[37],"years.":[38],"<br/>The":[39],"attack":[41,216,252,287],"aims":[42],"misclassify":[44,85],"inputs":[45,259],"with":[46],"specific":[47],"trigger":[48,210],"pattern(s)":[49],"into":[50],"pre-determined":[52],"label(s)":[53],"by":[54],"training":[55],"model":[57,365],"on":[58,64,184,190,195,201,213,218,228,231,253,272,275,288,313,321,346,359],"poisoned":[60,258],"dataset.":[61],"Backdoor":[62],"attacks":[63,151,189,200,274,312,320,331,358],"DNNs":[65],"can":[66,81,136,296],"lead":[67,137],"severe":[69,139],"real-world":[70,98],"consequences,":[71],"e.g.,":[72,179],"a":[73,78,86,90,108,249,283,340],"deep":[74],"leaning-based":[75],"classifier":[76],"self-driving":[79],"car":[80],"be":[82,263],"backdoored":[83],"stop":[87],"sign":[88],"speed":[91],"limit":[92],"sign.":[93],"<br/><br/>With":[94],"an":[95,185],"increasing":[96],"of":[97,110,187,209,244,328,356],"data":[99,175],"being":[100],"represented":[101],"graphs,":[103],"Graph":[104],"(GNNs),":[107],"subset":[109],"DNNs,":[112,128],"remarkable":[115],"performance":[116,217],"processing":[118],"graph":[119,167,174],"data.":[120],"Despite":[121],"efficiency,":[123],"GNNs,":[124,232,322],"similar":[125],"other":[127,177],"are":[129,144],"also":[130,324],"vulnerable":[131],"which":[135,233],"results,":[140],"especially":[141],"when":[142],"GNNs":[143,254,277,289,344,360],"applied":[145],"security-related":[147],"scenarios.":[148],"Although":[149],"extensively":[154],"studied":[155],"domain,":[159],"we":[160,205,224,247,270,306,323],"still":[161],"need":[162],"dedicated":[163],"efforts":[164],"for":[165,332,335,343],"domain":[168],"due":[169],"difference":[172],"between":[173,239],"data,":[178],"images.":[180],"<br/><br/>This":[181],"thesis":[182],"embarks":[183],"exploration":[186],"GNNs.":[191,203,219,245,315,336],"Chapter":[192,279,337],"2":[193],"focuses":[194],"designing":[196,317],"investigating":[198],"centralized":[202,308],"Specifically,":[204],"explore":[206,221,325],"influence":[208],"injecting":[211],"position":[212],"To":[220],"this":[222],"impact,":[223],"propose":[225,282],"approaches":[226],"based":[227,345],"explanation":[229],"techniques":[230],"contributes":[234],"exploring":[236],"interaction":[238],"explainability":[241],"robustness":[243],"Furthermore,":[246],"design":[248],"clean-label":[250],"make":[256],"more":[260,369],"challenging":[261],"detected.":[264],"<br/><br/>Considering":[265],"growing":[267],"privacy":[268],"concern,":[269],"focus":[271],"federated":[276,314],"3.":[280],"We":[281],"label-only":[284],"membership":[285],"inference":[286],"scenario":[292],"that":[293],"attacker":[295],"only":[297],"get":[298],"label":[299],"output":[300],"from":[301],"GNN":[303,364],"models.":[304,371],"Moreover,":[305],"investigate":[307],"distributed":[310],"<br/><br/>Besides":[316],"efficient":[318],"possibility":[327],"leveraging":[329],"defensive":[333],"purposes":[334],"4":[338],"introduces":[339],"watermarking":[341],"framework":[342],"attacks.":[348],"<br/>Our":[349],"research":[350],"outcomes":[351],"will":[352],"deepen":[353],"understanding":[355],"push":[362],"designers":[366],"develop":[368],"secure":[370]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2025-10-10T00:00:00"}