{"id":"https://openalex.org/W7139932681","doi":"https://doi.org/10.48550/arxiv.2603.18570","title":"Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networks","display_name":"Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networks","publication_year":2026,"publication_date":"2026-03-19","ids":{"openalex":"https://openalex.org/W7139932681","doi":"https://doi.org/10.48550/arxiv.2603.18570"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.18570","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18570","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.18570","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130233830","display_name":"Jiahao Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Jiahao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130229714","display_name":"Yilong Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yilong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5130252701","display_name":"Suhang Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Suhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.942799985408783,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.942799985408783,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.01860000006854534,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.0066999997943639755,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8427000045776367},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6751000285148621},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.6340000033378601},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4903999865055084},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.48919999599456787},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.391400009393692},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.32899999618530273}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8427000045776367},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7803999781608582},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6751000285148621},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.6340000033378601},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4903999865055084},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.48919999599456787},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48019999265670776},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.421099990606308},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4138999879360199},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.391400009393692},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34630000591278076},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.32899999618530273},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3142000138759613},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.29330000281333923},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.2842000126838684},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2793000042438507},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.27880001068115234},{"id":"https://openalex.org/C146380142","wikidata":"https://www.wikidata.org/wiki/Q1137726","display_name":"Directed graph","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.25870001316070557},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.25189998745918274}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.18570","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18570","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.18570","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18570","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.8031836152076721,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Graph":[0],"neural":[1],"networks":[2],"(GNNs)":[3],"are":[4,120],"widely":[5],"used":[6],"for":[7,185],"learning":[8],"from":[9,47],"graph-structured":[10],"data":[11,45],"in":[12],"domains":[13],"such":[14,85],"as":[15,154],"social":[16],"networks,":[17],"recommender":[18],"systems,":[19],"and":[20,32,75,112,123,133,166,177,192],"financial":[21],"platforms.":[22],"To":[23],"comply":[24],"with":[25],"privacy":[26],"regulations":[27],"like":[28],"the":[29,41,95,109,135,161,171,186,211],"GDPR,":[30],"CCPA,":[31],"PIPEDA,":[33],"approximate":[34,64,170],"graph":[35,61,111],"unlearning,":[36],"which":[37,71],"aims":[38],"to":[39,159,182],"remove":[40],"influence":[42],"of":[43,59,97,163,213],"specific":[44],"points":[46],"trained":[48],"models":[49],"without":[50],"full":[51],"retraining,":[52],"has":[53],"become":[54],"an":[55,102],"increasingly":[56],"important":[57],"component":[58],"trustworthy":[60],"learning.":[62],"However,":[63],"unlearning":[65,146,165,172,193,200,215],"often":[66],"incurs":[67],"subtle":[68],"performance":[69],"degradation,":[70,206],"may":[72],"incur":[73],"negative":[74],"unintended":[76],"side":[77],"effects.":[78],"In":[79],"this":[80,127,152],"work,":[81],"we":[82,150,169],"show":[83],"that":[84,196],"degradations":[86],"can":[87,202],"be":[88,125,224],"amplified":[89],"into":[90,108],"adversarial":[91],"attacks.":[92],"We":[93],"introduce":[94],"notion":[96],"\\textbf{unlearning":[98],"corruption":[99],"attacks},":[100],"where":[101],"adversary":[103],"injects":[104],"carefully":[105,198],"chosen":[106],"nodes":[107],"training":[110],"later":[113],"requests":[114,119,201],"their":[115],"deletion.":[116],"Because":[117],"deletion":[118],"legally":[121],"mandated":[122],"cannot":[124],"denied,":[126],"attack":[128,153],"surface":[129],"is":[130,147],"both":[131],"unavoidable":[132],"stealthy:":[134],"model":[136,181],"performs":[137],"normally":[138],"during":[139],"training,":[140],"but":[141],"accuracy":[142,205],"collapses":[143],"only":[144],"after":[145],"applied.":[148],"Technically,":[149],"formulate":[151],"a":[155,179],"bi-level":[156],"optimization":[157],"problem:":[158],"overcome":[160],"challenges":[162],"black-box":[164],"label":[167],"scarcity,":[168],"process":[173],"via":[174],"gradient-based":[175],"updates":[176],"employ":[178],"surrogate":[180],"generate":[183],"pseudo-labels":[184],"optimization.":[187],"Extensive":[188],"experiments":[189],"across":[190],"benchmarks":[191],"algorithms":[194],"demonstrate":[195],"small,":[197],"designed":[199],"induce":[203],"significant":[204],"raising":[207],"urgent":[208],"concerns":[209],"about":[210],"robustness":[212],"GNN":[214],"under":[216],"real-world":[217],"regulatory":[218],"demands.":[219],"The":[220],"source":[221],"code":[222],"will":[223],"released":[225],"upon":[226],"paper":[227],"acceptance.":[228]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-03-21T00:00:00"}