{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,26]],"date-time":"2026-05-26T18:06:30Z","timestamp":1779818790940,"version":"3.53.1"},"publisher-location":"Cham","reference-count":23,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032060655","type":"print"},{"value":"9783032060662","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,10,4]],"date-time":"2025-10-04T00:00:00Z","timestamp":1759536000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,10,4]],"date-time":"2025-10-04T00:00:00Z","timestamp":1759536000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-06066-2_16","type":"book-chapter","created":{"date-parts":[[2025,10,3]],"date-time":"2025-10-03T17:24:34Z","timestamp":1759512274000},"page":"263-279","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Backdoor Attacks on\u00a0Graph Classification via\u00a0Data Augmentation and\u00a0Dynamic Poisoning"],"prefix":"10.1007","author":[{"given":"Yadong","family":"Wang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhiwei","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Pengpeng","family":"Qiao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ye","family":"Yuan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guoren","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,10,4]]},"reference":[{"key":"16_CR1","doi-asserted-by":"crossref","unstructured":"Bi, B., Zhang, Z., Qiao, P., Yuan, Y., Wang, G.: FedSig: a federated graph augmentation for class-imbalanced node classification. In: International Conference on Database Systems for Advanced Applications, pp. 474\u2013490. Springer (2024)","DOI":"10.1007\/978-981-97-5552-3_32"},{"issue":"1","key":"16_CR2","doi-asserted-by":"publisher","first-page":"17","DOI":"10.1038\/s43586-024-00294-7","volume":"4","author":"G Corso","year":"2024","unstructured":"Corso, G., Stark, H., Jegelka, S., Jaakkola, T., Barzilay, R.: Graph neural networks. Nature Rev. Meth. Prim. 4(1), 17 (2024)","journal-title":"Nature Rev. Meth. Prim."},{"key":"16_CR3","doi-asserted-by":"crossref","unstructured":"Dai, E., Lin, M., Zhang, X., Wang, S.: Unnoticeable backdoor attacks on graph neural networks. In: Proceedings of the ACM Web Conference 2023, pp. 2263\u20132273 (2023)","DOI":"10.1145\/3543507.3583392"},{"issue":"2","key":"16_CR4","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1145\/3575637.3575646","volume":"24","author":"K Ding","year":"2022","unstructured":"Ding, K., Xu, Z., Tong, H., Liu, H.: Data augmentation for deep graph learning: a survey. ACM SIGKDD Expl. Newsl 24(2), 61\u201377 (2022)","journal-title":"ACM SIGKDD Expl. Newsl"},{"key":"16_CR5","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1007\/s10844-020-00629-2","volume":"57","author":"M Ianni","year":"2021","unstructured":"Ianni, M., Masciari, E., Sperl\u00ed, G.: A survey of big data dimensions vs social networks analysis. J. Intell. Info. Syst. 57, 73\u2013100 (2021)","journal-title":"J. Intell. Info. Syst."},{"key":"16_CR6","unstructured":"Katharopoulos, A., Fleuret, F.: Not all samples are created equal: deep learning with importance sampling. In: International Conference on Machine Learning, pp. 2525\u20132534. PMLR (2018)"},{"issue":"1","key":"16_CR7","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1109\/TNNLS.2022.3182979","volume":"35","author":"Y Li","year":"2022","unstructured":"Li, Y., Jiang, Y., Li, Z., Xia, S.T.: Backdoor learning: a survey. IEEE Trans. Neural Netw. Learn. Syst. 35(1), 5\u201322 (2022)","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"key":"16_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"182","DOI":"10.1007\/978-3-030-58607-2_11","volume-title":"Computer Vision \u2013 ECCV 2020","author":"Y Liu","year":"2020","unstructured":"Liu, Y., Ma, X., Bailey, J., Lu, F.: Reflection backdoor: a natural backdoor attack on deep neural networks. In: Vedaldi, A., Bischof, H., Brox, T., Frahm, J.-M. (eds.) ECCV 2020. LNCS, vol. 12355, pp. 182\u2013199. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-58607-2_11"},{"key":"16_CR9","doi-asserted-by":"crossref","unstructured":"Qiao, P., et al.: Tag: joint triple-hierarchical attention and GCN for review-based social recommender system. IEEE Trans. Knowl. Data Eng. 35(10), 9904\u20139919 (2022)","DOI":"10.1109\/TKDE.2022.3194952"},{"issue":"1","key":"16_CR10","doi-asserted-by":"publisher","DOI":"10.15252\/msb.20188792","volume":"17","author":"AL Richards","year":"2021","unstructured":"Richards, A.L., Eckhardt, M., Krogan, N.J.: Mass spectrometry-based protein-protein interaction networks for the study of human diseases. Mol. Syst. Biol. 17(1), e8792 (2021)","journal-title":"Mol. Syst. Biol."},{"issue":"5","key":"16_CR11","doi-asserted-by":"publisher","first-page":"355","DOI":"10.1007\/s10822-022-00442-9","volume":"36","author":"R Rodr\u00edguez-P\u00e9rez","year":"2022","unstructured":"Rodr\u00edguez-P\u00e9rez, R., Bajorath, J.: Evolution of support vector machine and regression modeling in chemoinformatics and drug discovery. J. Comput. Aided Mol. Des. 36(5), 355\u2013362 (2022)","journal-title":"J. Comput. Aided Mol. Des."},{"issue":"2","key":"16_CR12","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3706062","volume":"19","author":"Y Sui","year":"2025","unstructured":"Sui, Y., et al.: A simple data augmentation for graph classification: a perspective of equivariance and invariance. ACM Trans. Knowl. Discov. Data 19(2), 1\u201324 (2025)","journal-title":"ACM Trans. Knowl. Discov. Data"},{"key":"16_CR13","unstructured":"Toneva, M., Sordoni, A., Combes, R.T.d., Trischler, A., Bengio, Y., Gordon, G.J.: An empirical study of example forgetting during deep neural network learning. arXiv preprint arXiv:1812.05159 (2018)"},{"key":"16_CR14","doi-asserted-by":"crossref","unstructured":"Wu, L., Cui, P., Pei, J., Zhao, L., Guo, X.: Graph neural networks: foundation, frontiers and applications. In: Proceedings of the 28th ACM SIGKDD Conference on Knowledge Discovery and Data Mining, pp. 4840\u20134841 (2022)","DOI":"10.1145\/3534678.3542609"},{"key":"16_CR15","unstructured":"Xi, Z., Pang, R., Ji, S., Wang, T.: Graph backdoor. In: 30th USENIX Security Symposium (USENIX Security 21), pp. 1523\u20131540 (2021)"},{"key":"16_CR16","doi-asserted-by":"crossref","unstructured":"Xia, P., Li, Z., Zhang, W., Li, B.: Data-efficient backdoor attacks. arXiv preprint arXiv:2204.12281 (2022)","DOI":"10.24963\/ijcai.2022\/554"},{"issue":"15","key":"16_CR17","doi-asserted-by":"publisher","first-page":"1709","DOI":"10.2174\/1568026617666161116143440","volume":"17","author":"X Xia","year":"2017","unstructured":"Xia, X.: Bioinformatics and drug discovery. Curr. Top. Med. Chem. 17(15), 1709\u20131726 (2017)","journal-title":"Curr. Top. Med. Chem."},{"key":"16_CR18","doi-asserted-by":"crossref","unstructured":"Xu, J., Xue, M., Picek, S.: Explainability-based backdoor attacks against graph neural networks. In: Proceedings of the 3rd ACM Workshop on Wireless Security and Machine Learning, pp. 31\u201336 (2021)","DOI":"10.1145\/3468218.3469046"},{"key":"16_CR19","doi-asserted-by":"crossref","unstructured":"Yang, S., et al.: Transferable graph backdoor attack. In: Proceedings of the 25th International Symposium on Research in Attacks, Intrusions and Defenses, pp. 321\u2013332 (2022)","DOI":"10.1145\/3545948.3545976"},{"key":"16_CR20","doi-asserted-by":"crossref","unstructured":"Zeng, Y., Park, W., Mao, Z.M., Jia, R.: Rethinking the backdoor attacks\u2019 triggers: a frequency perspective. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 16473\u201316481 (2021)","DOI":"10.1109\/ICCV48922.2021.01616"},{"key":"16_CR21","doi-asserted-by":"crossref","unstructured":"Zhang, Z., Jia, J., Wang, B., Gong, N.Z.: Backdoor attacks to graph neural networks. In: Proceedings of the 26th ACM Symposium on Access Control Models and Technologies, pp. 15\u201326 (2021)","DOI":"10.1145\/3450569.3463560"},{"issue":"2","key":"16_CR22","doi-asserted-by":"publisher","first-page":"2479","DOI":"10.1109\/TCSS.2023.3267094","volume":"11","author":"H Zheng","year":"2023","unstructured":"Zheng, H., Xiong, H., Chen, J., Ma, H., Huang, G.: Motif-backdoor: rethinking the backdoor attack on graph neural networks via motifs. IEEE Trans. Comput. Soc. Syst. 11(2), 2479\u20132493 (2023)","journal-title":"IEEE Trans. Comput. Soc. Syst."},{"key":"16_CR23","doi-asserted-by":"crossref","unstructured":"Zhu, Y., Xu, Y., Yu, F., Liu, Q., Wu, S., Wang, L.: Graph contrastive learning with adaptive augmentation. In: Proceedings of the Web Conference 2021, pp. 2069\u20132080 (2021)","DOI":"10.1145\/3442381.3449802"}],"container-title":["Lecture Notes in Computer Science","Machine Learning and Knowledge Discovery in Databases. Research Track"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-06066-2_16","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,26]],"date-time":"2026-05-26T17:41:36Z","timestamp":1779817296000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-06066-2_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,4]]},"ISBN":["9783032060655","9783032060662"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-06066-2_16","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10,4]]},"assertion":[{"value":"4 October 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Disclosure of Interests"}},{"value":"ECML PKDD","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Joint European Conference on Machine Learning and Knowledge Discovery in Databases","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Porto","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Portugal","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ecml2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ecmlpkdd.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}