{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T14:02:54Z","timestamp":1781100174617,"version":"3.54.1"},"reference-count":40,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100001459","name":"Government of Singapore Ministry of Education","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001459","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Neurocomputing"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1016\/j.neucom.2026.134103","type":"journal-article","created":{"date-parts":[[2026,5,26]],"date-time":"2026-05-26T16:14:43Z","timestamp":1779812083000},"page":"134103","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["HeteroBA: A structure-manipulating backdoor attack on heterogeneous graphs"],"prefix":"10.1016","volume":"696","author":[{"given":"Honglin","family":"Gao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lan","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5482-250X","authenticated-orcid":false,"given":"Junhao","family":"Ren","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4171-6799","authenticated-orcid":false,"given":"Gaoxi","family":"Xiao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.neucom.2026.134103_bib0005","author":"Chen"},{"key":"10.1016\/j.neucom.2026.134103_bib0010","doi-asserted-by":"crossref","DOI":"10.1155\/2023\/5418398","article-title":"Feature-based graph backdoor attack in the node classification task","volume":"2023","author":"Chen","year":"2023","journal-title":"Int. J. Intell. Syst."},{"key":"10.1016\/j.neucom.2026.134103_bib0015","author":"Cheng"},{"key":"10.1016\/j.neucom.2026.134103_bib0020","series-title":"Proceedings of the ACM Web Conference 2023. ACM","first-page":"2263","article-title":"Unnoticeable backdoor attacks on graph neural networks","author":"Dai","year":"2023"},{"key":"10.1016\/j.neucom.2026.134103_bib0025","doi-asserted-by":"crossref","DOI":"10.1016\/j.compbiomed.2023.107882","article-title":"Health-aware food recommendation system with dual attention in heterogeneous graphs","volume":"169","author":"Forouzandeh","year":"2024","journal-title":"Comput. Biol. Med."},{"key":"10.1016\/j.neucom.2026.134103_bib0030","series-title":"Proceedings of the Web Conference 2020. ACM","first-page":"2331","article-title":"Magnn: metapath aggregated graph neural network for heterogeneous graph embedding","author":"Fu","year":"2020"},{"key":"10.1016\/j.neucom.2026.134103_bib0035","author":"Gao"},{"issue":"12","key":"10.1016\/j.neucom.2026.134103_bib0040","doi-asserted-by":"crossref","first-page":"8093","DOI":"10.1109\/TKDE.2024.3434956","article-title":"Efficient heterogeneous graph learning via random projection","volume":"36","author":"Hu","year":"2024","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"10.1016\/j.neucom.2026.134103_bib0045","series-title":"Proceedings of the Web Conference 2020. ACM","first-page":"2704","article-title":"Heterogeneous graph transformer","author":"Hu","year":"2020"},{"key":"10.1016\/j.neucom.2026.134103_bib0050","series-title":"International Conference on Security, Privacy, and Applied Cryptography Engineering","first-page":"149","article-title":"Benchmarking backdoor attacks on graph convolution neural networks: a comprehensive analysis of poisoning techniques","author":"Karn","year":"2024"},{"key":"10.1016\/j.neucom.2026.134103_bib0055","doi-asserted-by":"crossref","DOI":"10.1016\/j.neunet.2025.107726","article-title":"Dtgba: a stronger graph backdoor attack with dual triggers","volume":"190","author":"Li","year":"2025","journal-title":"Neural Netw."},{"key":"10.1016\/j.neucom.2026.134103_bib0060","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"16121","article-title":"Poisoning-based backdoor attacks in computer vision","volume":"vol. 37","author":"Li","year":"2023"},{"key":"10.1016\/j.neucom.2026.134103_bib0065","author":"Liang"},{"key":"10.1016\/j.neucom.2026.134103_bib0070","series-title":"Computer Vision\u2013ECCV 2020: 16th European Conference, (23-28 August 2020), Proceedings, Part X 16","first-page":"182","article-title":"Reflection backdoor: a natural backdoor attack on deep neural networks","author":"Liu","year":"2020"},{"key":"10.1016\/j.neucom.2026.134103_bib0075","series-title":"Pacific-Asia Conference on Knowledge Discovery and Data Mining","first-page":"728","article-title":"Content matters: a GNN-based model combined with text semantics for social network cascade prediction","author":"Liu","year":"2021"},{"key":"10.1016\/j.neucom.2026.134103_bib0080","series-title":"Proceedings of the 27th ACM SIGKDD Conference on Knowledge Discovery & Data Mining. ACM","first-page":"1150","article-title":"Are we really making much progress? Revisiting, benchmarking and refining heterogeneous graph neural networks","author":"Lv","year":"2021"},{"key":"10.1016\/j.neucom.2026.134103_bib0085","doi-asserted-by":"crossref","first-page":"1515","DOI":"10.1093\/bib\/bbaa257","article-title":"Biological network analysis with deep learning","volume":"22","author":"Muzio","year":"2021","journal-title":"Brief. Bioinform."},{"key":"10.1016\/j.neucom.2026.134103_bib0090","series-title":"Proceedings of the ACM Web Conference 2023. ACM","first-page":"263","article-title":"Link prediction on latent heterogeneous graphs","author":"Nguyen","year":"2023"},{"key":"10.1016\/j.neucom.2026.134103_bib0095","series-title":"European Semantic Web Conference","first-page":"593","article-title":"Modeling relational data with graph convolutional networks","author":"Schlichtkrull","year":"2018"},{"key":"10.1016\/j.neucom.2026.134103_bib0100","series-title":"2022 IEEE 22nd International Conference on Software Quality, Reliability and Security (QRS)","first-page":"809","article-title":"A survey on backdoor attack and defense in natural language processing","author":"Sheng","year":"2022"},{"key":"10.1016\/j.neucom.2026.134103_bib0105","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"20461","article-title":"Faithful and accurate self-attention attribution for message passing neural networks via the computation tree viewpoint","author":"Shin","year":"2025"},{"key":"10.1016\/j.neucom.2026.134103_bib0110","series-title":"The World Wide Web Conference. ACM","first-page":"2022","article-title":"Heterogeneous graph attention network","author":"Wang","year":"2019"},{"key":"10.1016\/j.neucom.2026.134103_bib0115","doi-asserted-by":"crossref","DOI":"10.1016\/j.is.2023.102335","article-title":"Heterogeneous graph neural networks for fraud detection and explanation in supply chain finance","volume":"121","author":"Wu","year":"2024","journal-title":"Inf. Syst."},{"key":"10.1016\/j.neucom.2026.134103_bib0120","author":"Wu"},{"key":"10.1016\/j.neucom.2026.134103_bib0125","series-title":"30th USENIX Security Symposium (USENIX Security 21)","first-page":"1523","article-title":"Graph backdoor","author":"Xi","year":"2021"},{"key":"10.1016\/j.neucom.2026.134103_bib0130","series-title":"30th USENIX Security Symposium (USENIX Security 21)","first-page":"1523","article-title":"Graph backdoor","author":"Xi","year":"2021"},{"key":"10.1016\/j.neucom.2026.134103_bib0135","series-title":"Proceedings of the 31st ACM International Conference on Information & Knowledge Management. ACM","first-page":"3584","article-title":"Temporal and heterogeneous graph neural network for financial time series prediction","author":"Xiang","year":"2022"},{"key":"10.1016\/j.neucom.2026.134103_bib0140","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2024.112433","article-title":"A clean-label graph backdoor attack method in node classification task","volume":"304","author":"Xing","year":"2024","journal-title":"Knowl.-based Syst."},{"key":"10.1016\/j.neucom.2026.134103_bib0145","series-title":"Proceedings of the 30th ACM International Conference on Information & Knowledge Management. ACM","first-page":"2261","article-title":"Topic-aware heterogeneous graph neural network for link prediction","author":"Xu","year":"2021"},{"key":"10.1016\/j.neucom.2026.134103_bib0150","series-title":"Proceedings of the ACM on Web Conference 2024. ACM","first-page":"3919","article-title":"Federated heterogeneous graph neural network for privacy-preserving recommendation","author":"Yan","year":"2024"},{"key":"10.1016\/j.neucom.2026.134103_bib0155","doi-asserted-by":"crossref","first-page":"75729","DOI":"10.1109\/ACCESS.2022.3191784","article-title":"A comprehensive survey of graph neural networks for knowledge graphs","volume":"10","author":"Ye","year":"2022","journal-title":"IEEE Access"},{"key":"10.1016\/j.neucom.2026.134103_bib0160","doi-asserted-by":"crossref","first-page":"294","DOI":"10.1007\/s41019-024-00253-y","article-title":"Multi-view heterogeneous graph neural networks for node classification","volume":"9","author":"Zeng","year":"2024","journal-title":"Data Sci. Eng."},{"key":"10.1016\/j.neucom.2026.134103_bib0165","series-title":"Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining. ACM","first-page":"793","article-title":"Heterogeneous graph neural network","author":"Zhang","year":"2019"},{"key":"10.1016\/j.neucom.2026.134103_bib0170","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"4363","article-title":"Robust heterogeneous graph neural networks against adversarial attacks","volume":"vol. 36","author":"Zhang","year":"2022"},{"key":"10.1016\/j.neucom.2026.134103_bib0175","series-title":"Proceedings of the 26th ACM Symposium on Access Control Models and Technologies. ACM","first-page":"15","article-title":"Backdoor attacks to graph neural networks","author":"Zhang","year":"2021"},{"key":"10.1016\/j.neucom.2026.134103_bib0180","series-title":"Proceedings of the 30th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","first-page":"4386","article-title":"Rethinking graph backdoor attacks: a distribution-preserving perspective","author":"Zhang","year":"2024"},{"key":"10.1016\/j.neucom.2026.134103_bib0185","series-title":"The Thirteenth International Conference on Learning Representations","article-title":"Robustness inspired graph backdoor defense","author":"Zhang","year":"2025"},{"key":"10.1016\/j.neucom.2026.134103_bib0190","series-title":"Proceedings of the Thirty-Fourth International Joint Conference on Artificial Intelligence","first-page":"7949","article-title":"Sanitizing backdoored graph neural networks: a multidimensional approach","author":"Zhao","year":"2025"},{"key":"10.1016\/j.neucom.2026.134103_bib0195","series-title":"2019 IEEE International Conference on Data Mining (ICDM)","first-page":"1534","article-title":"Relation structure-aware heterogeneous graph neural network","author":"Zhu","year":"2019"},{"key":"10.1016\/j.neucom.2026.134103_bib0200","series-title":"Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining. ACM","first-page":"1161","article-title":"HGCN: a heterogeneous graph convolutional network-based deep learning model toward collective classification","author":"Zhu","year":"2020"}],"container-title":["Neurocomputing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0925231226015018?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0925231226015018?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T13:26:23Z","timestamp":1781097983000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0925231226015018"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":40,"alternative-id":["S0925231226015018"],"URL":"https:\/\/doi.org\/10.1016\/j.neucom.2026.134103","relation":{},"ISSN":["0925-2312"],"issn-type":[{"value":"0925-2312","type":"print"}],"subject":[],"published":{"date-parts":[[2026,10]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"HeteroBA: A structure-manipulating backdoor attack on heterogeneous graphs","name":"articletitle","label":"Article Title"},{"value":"Neurocomputing","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.neucom.2026.134103","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"134103"}}