{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T17:33:01Z","timestamp":1783791181943,"version":"3.55.0"},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62325604"],"award-info":[{"award-number":["62325604"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62276271"],"award-info":[{"award-number":["62276271"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Knowl. Data Eng."],"published-print":{"date-parts":[[2025,1]]},"DOI":"10.1109\/tkde.2024.3483274","type":"journal-article","created":{"date-parts":[[2024,10,21]],"date-time":"2024-10-21T17:23:09Z","timestamp":1729531389000},"page":"319-333","source":"Crossref","is-referenced-by-count":20,"title":["GZOO: Black-Box Node Injection Attack on Graph Neural Networks via Zeroth-Order Optimization"],"prefix":"10.1109","volume":"37","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9044-4841","authenticated-orcid":false,"given":"Hao","family":"Yu","sequence":"first","affiliation":[{"name":"School of Computer, National University of Defense Technology, Changsha, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4837-455X","authenticated-orcid":false,"given":"Ke","family":"Liang","sequence":"additional","affiliation":[{"name":"School of Computer, National University of Defense Technology, Changsha, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9369-7390","authenticated-orcid":false,"given":"Dayu","family":"Hu","sequence":"additional","affiliation":[{"name":"School of Computer, National University of Defense Technology, Changsha, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1353-2968","authenticated-orcid":false,"given":"Wenxuan","family":"Tu","sequence":"additional","affiliation":[{"name":"School of Computer, National University of Defense Technology, Changsha, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7819-4544","authenticated-orcid":false,"given":"Chuan","family":"Ma","sequence":"additional","affiliation":[{"name":"College of Computer Science, Chongqing University, Chongqing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1491-4594","authenticated-orcid":false,"given":"Sihang","family":"Zhou","sequence":"additional","affiliation":[{"name":"College of Intelligence Science and Technology, National University of Defense Technology, Changsha, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9066-1475","authenticated-orcid":false,"given":"Xinwang","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Computer, National University of Defense Technology, Changsha, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.2978386"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2021.3070843"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467142"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2020.3008732"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3417451"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3201243"},{"key":"ref7","first-page":"8317","article-title":"Certifiable robustness to graph perturbations","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Bojchevski"},{"key":"ref8","first-page":"7637","article-title":"Robustness of graph neural networks at scale","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Geisler"},{"key":"ref9","first-page":"4756","article-title":"Towards more practical adversarial attacks on graph neural networks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Ma"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3078755"},{"key":"ref11","article-title":"Attack graph convolutional networks by adding fake nodes","author":"Wang","year":"2018"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3459637.3482393"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467314"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i4.25558"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3153060"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2023.3282989"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i9.28935"},{"key":"ref18","article-title":"KDD CUP ML track 2 adversarial attacks and defense on academic graph 1st place solution","author":"Zheng","year":"2020"},{"key":"ref19","first-page":"1","article-title":"Graph robustness benchmark: Benchmarking the adversarial robustness of graph machine learning","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst. Datasets Benchmarks","author":"Zheng"},{"key":"ref20","article-title":"Graph neural networks: Methods, applications, and opportunities","author":"Waikhom","year":"2021"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2024.3386168"},{"key":"ref22","article-title":"Deep temporal graph clustering","author":"Liu","year":"2023"},{"key":"ref23","first-page":"1","article-title":"Understanding and improving graph injection attack by promoting unnoticeability","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Chen"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/tcss.2024.3361027"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref26","first-page":"1","article-title":"Semi-supervised classification with graph convolutional networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Kipf"},{"key":"ref27","first-page":"1","article-title":"Categorical reparameterization with Gumbel-Softmax","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Jang"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3141665"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.3301742"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/s10915-017-0621-6"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1609\/aimag.v29i3.2157"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/2766462.2767755"},{"key":"ref34","article-title":"Understanding isomorphism bias in graph data sets","author":"Ivanov","year":"2019"},{"key":"ref35","first-page":"1024","article-title":"Inductive representation learning on large graphs","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Hamilton"},{"key":"ref36","first-page":"22118","article-title":"Open graph benchmark: Datasets for machine learning on graphs","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Hu"},{"key":"ref37","article-title":"Wiki-CS: A wikipedia-based benchmark for graph neural networks","author":"Mernyei","year":"2020"},{"key":"ref38","first-page":"1","article-title":"Graphsaint: Graph sampling based inductive learning method","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Zeng"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1162\/qss_a_00021"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.576"},{"key":"ref41","article-title":"Deep graph library: A graph-centric, highly-performant package for graph neural networks","author":"Wang","year":"2019"},{"key":"ref42","first-page":"6861","article-title":"Simplifying graph convolutional networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Wu"},{"key":"ref43","first-page":"1","article-title":"Predict then propagate: Graph neural networks meet personalized pagerank","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Klicpera"},{"key":"ref44","first-page":"7264","article-title":"Convolutional neural networks on graphs with chebyshev approximation, revisited","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"He"},{"key":"ref45","first-page":"64753","article-title":"Simplifying and empowering transformers for large-graph representations","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Wu"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i12.29246"},{"key":"ref47","first-page":"1","article-title":"Graph attention networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Velickovic"},{"key":"ref48","first-page":"9263","article-title":"GNNGuard: Defending graph neural networks against adversarial attacks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Zhang"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330851"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583399"},{"key":"ref51","first-page":"1","article-title":"Empowering graph representation learning with test-time graph transformation","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Jin"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403049"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/18.61115"}],"container-title":["IEEE Transactions on Knowledge and Data Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/69\/10786487\/10726692.pdf?arnumber=10726692","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,11]],"date-time":"2024-12-11T22:07:06Z","timestamp":1733954826000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10726692\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,1]]},"references-count":53,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tkde.2024.3483274","relation":{},"ISSN":["1041-4347","1558-2191","2326-3865"],"issn-type":[{"value":"1041-4347","type":"print"},{"value":"1558-2191","type":"electronic"},{"value":"2326-3865","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,1]]}}}