{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T12:13:43Z","timestamp":1768911223587,"version":"3.49.0"},"reference-count":39,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key R&D Program of China","award":["2023YFB2703800"],"award-info":[{"award-number":["2023YFB2703800"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U23A20304"],"award-info":[{"award-number":["U23A20304"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62222201"],"award-info":[{"award-number":["62222201"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004826","name":"Beijing Natural Science Foundation","doi-asserted-by":"publisher","award":["M23020"],"award-info":[{"award-number":["M23020"]}],"id":[{"id":"10.13039\/501100004826","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,1]]},"DOI":"10.1109\/tdsc.2025.3612195","type":"journal-article","created":{"date-parts":[[2025,9,19]],"date-time":"2025-09-19T17:39:45Z","timestamp":1758303585000},"page":"890-904","source":"Crossref","is-referenced-by-count":0,"title":["PriGraph: Defending Against Inference Attacks on Graph Neural Networks via Policy-Based Adversarial Perturbations"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1867-0972","authenticated-orcid":false,"given":"Meng","family":"Shen","sequence":"first","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hao","family":"Lu","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Aijing","family":"Gu","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8776-8730","authenticated-orcid":false,"given":"Qi","family":"Li","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2587-8517","authenticated-orcid":false,"given":"Ke","family":"Xu","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3277-3887","authenticated-orcid":false,"given":"Liehuang","family":"Zhu","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1038\/nature04605"},{"key":"ref2","first-page":"2224","article-title":"Convolutional networks on graphs for learning molecular fingerprints","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Duvenaud"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3050608"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3437963.3441720"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450120"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1186\/s13321-020-00479-8"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313488"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOMWKSHPS54753.2022.9797992"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TPSISA52974.2021.00002"},{"key":"ref10","article-title":"Node-level membership inference attacks against graph neural networks","author":"He","year":"2021"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM51629.2021.00182"},{"key":"ref12","first-page":"2669","article-title":"Stealing links from graph neural networks","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"He"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/sp46214.2022.9833806"},{"key":"ref14","article-title":"Releasing graph neural networks with differential privacy guarantees","author":"Olatunji","year":"2021"},{"key":"ref15","article-title":"FeDGNN: Federated graph neural network for privacy-preserving recommendation","author":"Wu","year":"2021"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3036583"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/272"},{"key":"ref18","first-page":"1024","article-title":"Inductive representation learning on large graphs","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Hamilton"},{"key":"ref19","article-title":"Graph attention networks","author":"Veli\u010dkovi\u0107","year":"2017"},{"key":"ref20","article-title":"How powerful are graph neural networks?","author":"Xu","year":"2018"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3503161.3547898"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.26555\/ijain.v8i3.859"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-024-1510-8"},{"key":"ref24","article-title":"Transferability of white-box perturbations: Query-efficient adversarial attacks against commercial DNN services","volume-title":"Proc. 33rd USENIX Secur. Symp.","author":"Shen"},{"key":"ref25","article-title":"Graph neural networks for graphs with heterophily: A survey","author":"Zheng","year":"2022"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1609\/aimag.v29i3.2157"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1093\/comnet\/cnab014"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TFUZZ.2016.2586971"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-022-00646-y"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0103"},{"key":"ref31","article-title":"Variational graph auto-encoders","author":"Kipf","year":"2016"},{"key":"ref32","first-page":"1","article-title":"Inference attacks against graph neural networks","volume-title":"Proc. 31th USENIX Secur. Symp.","author":"Zhang"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/sp46214.2022.9833607"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93037-4_19"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484565"},{"key":"ref36","article-title":"Vertically federated graph neural network for privacy-preserving node classification","author":"Zhou","year":"2020"},{"key":"ref37","first-page":"6600","article-title":"Information obfuscation of graph neural networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Liao"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-5906-5_752"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.65109\/CYYE1244"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11354469\/11173947.pdf?arnumber=11173947","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,19]],"date-time":"2026-01-19T20:57:53Z","timestamp":1768856273000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11173947\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1]]},"references-count":39,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3612195","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1]]}}}