{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T16:43:38Z","timestamp":1777653818819,"version":"3.51.4"},"reference-count":65,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62402106"],"award-info":[{"award-number":["62402106"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372334"],"award-info":[{"award-number":["62372334"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Natural Science Foundation of Jiangsu Province of China","award":["BK20241272"],"award-info":[{"award-number":["BK20241272"]}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["2242024k30059"],"award-info":[{"award-number":["2242024k30059"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Start-Up Research Fund of Southeast University","award":["RF1028623129"],"award-info":[{"award-number":["RF1028623129"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,7]]},"DOI":"10.1109\/tdsc.2025.3535588","type":"journal-article","created":{"date-parts":[[2025,1,28]],"date-time":"2025-01-28T13:55:06Z","timestamp":1738072506000},"page":"3629-3646","source":"Crossref","is-referenced-by-count":6,"title":["SIGFinger: A Subtle and Interactive GNN Fingerprinting Scheme Via Spatial Structure Inference Perturbation"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6894-1331","authenticated-orcid":false,"given":"Ju","family":"Jia","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Renjie","family":"Li","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0930-0283","authenticated-orcid":false,"given":"Cong","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Nanyang Technological University, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3479-5713","authenticated-orcid":false,"given":"Siqi","family":"Ma","sequence":"additional","affiliation":[{"name":"School of Engineering and Information Technology, University of New South Wales, Canberra, ACT, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8085-1312","authenticated-orcid":false,"given":"Lina","family":"Wang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3491-8146","authenticated-orcid":false,"given":"Robert H.","family":"Deng","sequence":"additional","affiliation":[{"name":"School of Information Systems, Singapore Management University, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3051099"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-021-00305-2"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3150272"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00700"},{"key":"ref5","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Adi"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304051"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00486"},{"key":"ref8","first-page":"314","article-title":"Temporal watermarks for deep reinforcement learning models","volume-title":"Proc. 20th Int. Conf. Auton. Agents Multiagent Syst.","author":"Chen"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3194704"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833747"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3222972"},{"key":"ref12","first-page":"3593","article-title":"Teacher model fingerprinting attacks against transfer learning","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Chen"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3064850"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3437526"},{"key":"ref15","article-title":"Deep neural network fingerprinting by conferrable adversarial examples","volume-title":"Proc. 9th Int. Conf. Learn. Representations","author":"Lukas"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2019.12.016"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01307"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539257"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3198267"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2019.8683753"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS52919.2021.9486352"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/eurosp57164.2023.00072"},{"key":"ref23","first-page":"1","article-title":"Thieves on sesame street! model extraction of BERT-based APIs","volume-title":"Proc. 8th Int. Conf. Learn. Representations","author":"Krishna"},{"key":"ref24","first-page":"2669","article-title":"Stealing links from graph neural networks","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"He"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833607"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01485"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3261327"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833644"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484749"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i3.20169"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref32","first-page":"1345","article-title":"High accuracy and high fidelity extraction of neural networks","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Jagielski"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3497753"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i12.17283"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3211955"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2020.2981333"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3154319"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3184263"},{"key":"ref39","first-page":"10881","article-title":"Graph structure of neural networks","volume-title":"Proc. 37th Int. Conf. Mach. Learn.","author":"You"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403049"},{"key":"ref41","first-page":"1","article-title":"Discovering invariant rationales for graph neural networks","volume-title":"Proc. 10th Int. Conf. Learn. Representations","author":"Wu"},{"key":"ref42","article-title":"Deep inside convolutional networks: Visualising image classification models and saliency maps","volume-title":"Proc. 2nd Int. Conf. Learn. Representations","author":"Simonyan"},{"key":"ref43","first-page":"3319","article-title":"Axiomatic attribution for deep networks","volume-title":"Proc. 34th Int. Conf. Mach. Learn.","author":"Sundararajan"},{"key":"ref44","first-page":"14747","article-title":"Deep leakage from gradients","volume-title":"Proc. Annu. Conf. Neural Inf. Process. Syst.","author":"Zhu"},{"key":"ref45","first-page":"19620","article-title":"Parameterized explainer for graph neural network","volume-title":"Proc. Annu. Conf. Neural Inf. Process. Syst.","author":"Luo"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3187455"},{"key":"ref47","first-page":"13333","article-title":"Diffusion improves graph learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Klicpera"},{"key":"ref48","first-page":"1","article-title":"Semi-supervised classification with graph convolutional networks","volume-title":"Proc. 5th Int. Conf. Learn. Representations","author":"Kipf"},{"key":"ref49","first-page":"49","article-title":"Learning output kernels with block coordinate descent","volume-title":"Proc. 28th Int. Conf. Mach. Learn.","author":"Dinuzzo"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1609\/aimag.v29i3.2157"},{"key":"ref51","first-page":"4204","article-title":"Understanding attention and generalization in graph neural networks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Knyazev"},{"key":"ref52","first-page":"9240","article-title":"GNNExplainer: Generating explanations for graph neural networks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Ying"},{"key":"ref53","article-title":"TUDataset: A collection of benchmark datasets for learning with graphs","author":"Morris","year":"2020"},{"key":"ref54","first-page":"22118","article-title":"Open graph benchmark: Datasets for machine learning on graphs","volume-title":"Proc. Annu. Conf. Neural Inf. Process. Syst.","author":"Hu"},{"key":"ref55","article-title":"Semi-supervised classification with graph convolutional networks","author":"Kipf","year":"2016"},{"key":"ref56","article-title":"Graph attention networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Velickovic"},{"key":"ref57","article-title":"How powerful are graph neural networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Xu"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i8.16908"},{"key":"ref59","first-page":"24017","article-title":"Structural entropy guided graph hierarchical pooling","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Wu"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i9.26318"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3259881"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3589334.3645489"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3315780"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3383648"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS51556.2021.9401119"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11077775\/10856347.pdf?arnumber=10856347","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,11]],"date-time":"2025-07-11T22:48:35Z","timestamp":1752274115000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10856347\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7]]},"references-count":65,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3535588","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,7]]}}}