{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T00:48:24Z","timestamp":1783730904367,"version":"3.55.0"},"reference-count":65,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"9","license":[{"start":{"date-parts":[[2023,9,1]],"date-time":"2023-09-01T00:00:00Z","timestamp":1693526400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,9,1]],"date-time":"2023-09-01T00:00:00Z","timestamp":1693526400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,9,1]],"date-time":"2023-09-01T00:00:00Z","timestamp":1693526400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61922073"],"award-info":[{"award-number":["61922073"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U20A20229"],"award-info":[{"award-number":["U20A20229"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["WK2150110021"],"award-info":[{"award-number":["WK2150110021"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Knowl. Data Eng."],"published-print":{"date-parts":[[2023,9,1]]},"DOI":"10.1109\/tkde.2022.3207915","type":"journal-article","created":{"date-parts":[[2022,9,19]],"date-time":"2022-09-19T20:14:00Z","timestamp":1663618440000},"page":"8729-8741","source":"Crossref","is-referenced-by-count":54,"title":["Model Inversion Attacks Against Graph Neural Networks"],"prefix":"10.1109","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0380-6558","authenticated-orcid":false,"given":"Zaixi","family":"Zhang","sequence":"first","affiliation":[{"name":"Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6956-5550","authenticated-orcid":false,"given":"Qi","family":"Liu","sequence":"additional","affiliation":[{"name":"Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1661-0420","authenticated-orcid":false,"given":"Zhenya","family":"Huang","sequence":"additional","affiliation":[{"name":"Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9921-2078","authenticated-orcid":false,"given":"Hao","family":"Wang","sequence":"additional","affiliation":[{"name":"Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chee-Kong","family":"Lee","sequence":"additional","affiliation":[{"name":"Tencent Quantum Lab, Shenzhen, Guangdong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4835-4102","authenticated-orcid":false,"given":"Enhong","family":"Chen","sequence":"additional","affiliation":[{"name":"Anhui Province Key Laboratory of BIg Data Analysis and Application (BDAA), School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1134271.1134277"},{"key":"ref3","article-title":"Gamin: An adversarial approach to black-box model inversion","author":"A\u00efvodji","year":"2019"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/FOCS.2012.67"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2422436.2422449"},{"key":"ref6","first-page":"8319","article-title":"Certifiable robustness to graph perturbations","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Bojchevski"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/bti1007"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5741"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2020.3004059"},{"key":"ref10","article-title":"Fast gradient attack on network embedding","author":"Chen","year":"2018"},{"key":"ref11","first-page":"1115","article-title":"Adversarial attack on graph structured data","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Dai"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313445"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3448891.3448939"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1561\/9781601988195"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2020.3008732"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2019.2957786"},{"key":"ref17","first-page":"385","article-title":"Online convex optimization in the bandit setting: Gradient descent without a gradient","volume-title":"Proc. 16th Annu. ACM-SIAM Symp. Discrete Algorithms","author":"Flaxman"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref19","first-page":"17","article-title":"Privacy in pharmacogenetics: An end-to-end case study of personalized warfarin dosing","volume-title":"Proc. USENIX Secur. Symp.","author":"Fredrikson"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/s10915-017-0621-6"},{"key":"ref21","first-page":"1263","article-title":"Neural message passing for quantum chemistry","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Gilmer"},{"key":"ref22","first-page":"1024","article-title":"Inductive representation learning on large graphs","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Hamilton"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2009.11"},{"key":"ref24","first-page":"2669","article-title":"Stealing links from graph neural networks","volume-title":"Proc. USENIX Secur. Symp.","author":"He"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/tkde.2021.3087515"},{"key":"ref26","first-page":"10654","article-title":"Universal graph convolutional networks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Jin"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3447556.3447566"},{"key":"ref28","article-title":"Variational graph auto-encoders","volume-title":"Proc. Bayesian Deep Learn. Workshop","author":"Kipf"},{"key":"ref29","article-title":"Semi-supervised classification with graph convolutional networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Kipf"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/tkde.2021.3078755"},{"key":"ref31","first-page":"20887","article-title":"Large scale learning on non-homophilous graphs: New benchmarks and strong simple methods","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Lim"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/GlobalSIP.2018.8646618"},{"key":"ref33","first-page":"9780","article-title":"A unified framework for data poisoning attack to graph-based semi-supervised learning","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Liu"},{"key":"ref34","first-page":"4756","article-title":"Towards more practical adversarial attacks on graph neural networks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Ma"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467416"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1038\/nature14236"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484796"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098061"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89689-0_33"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3624010"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1609\/aimag.v29i3.2157"},{"issue":"1","key":"ref42","first-page":"1703","article-title":"An optimal algorithm for bandit and zero-order convex optimization with two-point feedback","volume":"18","author":"Shamir","year":"2017","journal-title":"J. Mach. Learn. Resh"},{"issue":"9","key":"ref43","first-page":"2539","article-title":"Weisfeiler-lehman graph kernels","volume":"12","author":"Shervashidze","year":"2011","journal-title":"J. Mach. Learn. Res."},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3201243"},{"key":"ref46","first-page":"673","article-title":"Non-target-specific node injection attacks on graph neural networks: A hierarchical reinforcement learning approach","volume-title":"Proc. Web Conf.","author":"Sun"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref48","article-title":"Graph attention networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Veli\u010dkovi\u0107"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354206"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3497753"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833806"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/669"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2016.32"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.aiopen.2021.05.002"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/550"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2020.3031329"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM51629.2021.00194"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00033"},{"key":"ref60","article-title":"Inference attacks against graph neural networks","volume-title":"Proc. USENIX Secur. Symp.","author":"Zhang"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2020.2981333"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/516"},{"key":"ref63","first-page":"15870","article-title":"Motif-based graph self-supervised learning for molecular property prediction","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Zhang"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3220078"},{"key":"ref65","article-title":"Adversarial attacks on graph neural networks via meta learning","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Z\u00fcgner"}],"container-title":["IEEE Transactions on Knowledge and Data Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/69\/10210449\/09895303.pdf?arnumber=9895303","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,5,24]],"date-time":"2024-05-24T04:49:46Z","timestamp":1716526186000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9895303\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,9,1]]},"references-count":65,"journal-issue":{"issue":"9"},"URL":"https:\/\/doi.org\/10.1109\/tkde.2022.3207915","relation":{},"ISSN":["1041-4347","1558-2191","2326-3865"],"issn-type":[{"value":"1041-4347","type":"print"},{"value":"1558-2191","type":"electronic"},{"value":"2326-3865","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,9,1]]}}}