{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,25]],"date-time":"2025-11-25T06:07:15Z","timestamp":1764050835238,"version":"3.45.0"},"reference-count":61,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62206238","62076125","62032025","U20B2049"],"award-info":[{"award-number":["62206238","62076125","62032025","U20B2049"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004608","name":"Natural Science Foundation of Jiangsu Province","doi-asserted-by":"publisher","award":["BK20251911"],"award-info":[{"award-number":["BK20251911"]}],"id":[{"id":"10.13039\/501100004608","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3631458","type":"journal-article","created":{"date-parts":[[2025,11,11]],"date-time":"2025-11-11T18:27:10Z","timestamp":1762885630000},"page":"12372-12387","source":"Crossref","is-referenced-by-count":0,"title":["<i>GraphCleanse<\/i>\n                    : Defending Backdoor Attacks in Graph Learning via Contrastive Training"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2143-5666","authenticated-orcid":false,"given":"Jiale","family":"Zhang","sequence":"first","affiliation":[{"name":"School of Information Engineering, Yangzhou University, Yangzhou, China"}]},{"given":"Hao","family":"Sui","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"}]},{"given":"Wanquan","family":"Zhu","sequence":"additional","affiliation":[{"name":"School of Information Engineering, Yangzhou University, Yangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-4082-0803","authenticated-orcid":false,"given":"Chengcheng","family":"Zhu","sequence":"additional","affiliation":[{"name":"State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5165-5080","authenticated-orcid":false,"given":"Xiaobing","family":"Sun","sequence":"additional","affiliation":[{"name":"School of Information Engineering, Yangzhou University, Yangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9274-7325","authenticated-orcid":false,"given":"Chunpeng","family":"Ge","sequence":"additional","affiliation":[{"name":"Joint SDU-NTU Centre for Artificial Intelligence Research (C-FAIR) and the Software School, Shandong University, Jinan, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2863-5441","authenticated-orcid":false,"given":"Bing","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0691-2724","authenticated-orcid":false,"given":"Mingsheng","family":"Cao","sequence":"additional","affiliation":[{"name":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, China"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1609.02907"},{"issue":"20","key":"ref2","first-page":"10","article-title":"Graph attention networks","volume":"1050","author":"Veli\u010dkovi\u0107","year":"2017","journal-title":"Stat"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449989"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3510454.3516865"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102632"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN54540.2023.10191949"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3468218.3469046"},{"key":"ref8","article-title":"A semantic backdoor attack against graph convolutional networks","author":"Dai","year":"2023","journal-title":"arXiv:2302.14353"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom56396.2022.00107"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3450569.3463560"},{"key":"ref11","article-title":"Neighboring backdoor attacks on graph convolutional network","author":"Chen","year":"2022","journal-title":"arXiv:2201.06202"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3563531"},{"key":"ref13","first-page":"1523","article-title":"Graph backdoor","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Xi"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2023.3267094"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3545948.3545976"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583392"},{"key":"ref17","first-page":"40888","article-title":"Graph contrastive backdoor attacks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhang"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179375"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179451"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179362"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3182979"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/OJSP.2022.3190213"},{"key":"ref23","article-title":"Detecting backdoor attacks on deep neural networks by activation clustering","author":"Chen","year":"2018","journal-title":"arXiv:1811.03728"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3329426"},{"key":"ref25","first-page":"1","article-title":"Backdoor defense via decoupling the training process","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Huang"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3384846"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/669"},{"key":"ref29","article-title":"Defending against backdoor attack on graph nerual network by explainability","author":"Jiang","year":"2022","journal-title":"arXiv:2209.02902"},{"key":"ref30","article-title":"MADE: Graph backdoor defense with masked unlearning","author":"Lin","year":"2024","journal-title":"arXiv:2411.18648"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.240798"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00029"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00031"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/sp54263.2024.00008"},{"key":"ref37","first-page":"14900","article-title":"Anti-backdoor learning: Training clean models on poisoned data","volume-title":"Proc. NIPS","volume":"34","author":"Li"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3172903"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00202"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36657-4_7"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-019-05855-6"},{"key":"ref42","first-page":"5812","article-title":"Graph contrastive learning with augmentations","volume-title":"Proc. NIPS","volume":"33","author":"You"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449802"},{"key":"ref44","first-page":"19580","article-title":"Directed graph contrastive learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Tong"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3477495.3531937"},{"key":"ref46","article-title":"An empirical study of graph contrastive learning","author":"Zhu","year":"2021","journal-title":"arXiv:2109.01116"},{"key":"ref47","first-page":"12121","article-title":"Graph contrastive learning automated","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"You"},{"key":"ref48","first-page":"30414","article-title":"INFOGCL: Information-aware graph contrastive learning","volume-title":"Proc. NIPS","volume":"34","author":"Xu"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2023.3288135"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3539597.3570484"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i9.26336"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i4.25547"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1995.7.6.1129"},{"key":"ref54","first-page":"1297","article-title":"Misep\u2013linear and nonlinear ICA based on mutual information","volume":"4","author":"Almeida","year":"2003","journal-title":"J. Mach. Learn. Res."},{"key":"ref55","first-page":"531","article-title":"Mutual information neural estimation","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Belghazi"},{"key":"ref56","first-page":"271","article-title":"F-GAN: Training generative neural samplers using variational divergence minimization","volume-title":"Proc. NIPS","author":"Nowozin"},{"key":"ref57","article-title":"InfoGraph: Unsupervised and semi-supervised graph-level representation learning via mutual information maximization","author":"Sun","year":"2019","journal-title":"arXiv:1908.01000"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/bti1007"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v29i1.9277"},{"issue":"9","key":"ref60","first-page":"1","article-title":"Weisfeiler-Lehman graph kernels","volume":"12","author":"Shervashidze","year":"2011","journal-title":"J. Mach. Learn. Res."},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/2783258.2783417"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/11240225.pdf?arnumber=11240225","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,25]],"date-time":"2025-11-25T05:55:32Z","timestamp":1764050132000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11240225\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":61,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3631458","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"type":"print","value":"1556-6013"},{"type":"electronic","value":"1556-6021"}],"subject":[],"published":{"date-parts":[[2025]]}}}