{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,11]],"date-time":"2026-04-11T13:09:10Z","timestamp":1775912950154,"version":"3.50.1"},"reference-count":63,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2025,5,1]],"date-time":"2025-05-01T00:00:00Z","timestamp":1746057600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,5,1]],"date-time":"2025-05-01T00:00:00Z","timestamp":1746057600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,5,1]],"date-time":"2025-05-01T00:00:00Z","timestamp":1746057600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272032"],"award-info":[{"award-number":["62272032"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Knowl. Data Eng."],"published-print":{"date-parts":[[2025,5]]},"DOI":"10.1109\/tkde.2025.3538645","type":"journal-article","created":{"date-parts":[[2025,2,11]],"date-time":"2025-02-11T18:29:40Z","timestamp":1739298580000},"page":"2226-2238","source":"Crossref","is-referenced-by-count":1,"title":["Adaptive Reliable Defense Graph for Multi-Channel Robust GCN"],"prefix":"10.1109","volume":"37","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-9626-4106","authenticated-orcid":false,"given":"Xiao","family":"Zhang","sequence":"first","affiliation":[{"name":"School of Software Engineering, Beijing Jiaotong University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1761-3060","authenticated-orcid":false,"given":"Peng","family":"Bao","sequence":"additional","affiliation":[{"name":"School of Software Engineering, Beijing Jiaotong University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313488"},{"key":"ref2","first-page":"1103","article-title":"SEAL: Learning heuristics for community detection with generative adversarial networks","volume-title":"Proc. 26th ACM SIGKDD Int. Conf. Knowl. Discov. Data Mining","author":"Zhang"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.14778\/3055540.3055554"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2019.00070"},{"key":"ref5","article-title":"Semi-supervised classification with graph convolutional networks","author":"Kipf","year":"2016"},{"key":"ref6","first-page":"1025","article-title":"Inductive representation learning on large graphs","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Hamilton"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512178"},{"key":"ref8","first-page":"5171","article-title":"Link prediction based on graph neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Zhang"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93417-4_38"},{"key":"ref10","article-title":"A fair comparison of graph neural networks for graph classification","author":"Errica","year":"2019"},{"key":"ref11","first-page":"1263","article-title":"Neural message passing for quantum chemistry","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Gilmer"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM50108.2020.00071"},{"key":"ref13","first-page":"1115","article-title":"Adversarial attack on graph structured data","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Dai"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3220078"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/550"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/669"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-019-1211-x"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3447556.3447566"},{"key":"ref19","first-page":"9263","article-title":"GNNGuard: Defending graph neural networks against adversarial attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Zhang"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1146\/annurev.soc.27.1.415"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-01588-5"},{"key":"ref22","first-page":"25058","article-title":"Not all low-pass filters are robust in graph convolutional networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Chang"},{"key":"ref23","first-page":"328","article-title":"Robust mid-pass filtering graph convolutional networks","volume-title":"Proc. ACM Web Conf.","author":"Huang"},{"key":"ref24","doi-asserted-by":"crossref","DOI":"10.24963\/ijcai.2021\/310","article-title":"Understanding structural vulnerability in graph convolutional networks","author":"Chen","year":"2021"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539484"},{"key":"ref26","first-page":"4756","article-title":"Towards more practical adversarial attacks on graph neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Ma"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i4.20350"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3201243"},{"key":"ref29","first-page":"1","article-title":"Adversarial attacks on graph neural networks via meta learning","volume-title":"Proc. 7th Int. Conf. Learn. Representations","author":"Z\u00fcgner"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"issue":"2","key":"ref31","doi-asserted-by":"crossref","first-page":"139","DOI":"10.1038\/s41562-017-0290-3","article-title":"Hiding individuals and communities in a social network","volume":"2","author":"Waniek","year":"2018","journal-title":"Nature Hum. Behav."},{"key":"ref32","article-title":"Fast gradient attack on network embedding","author":"Chen","year":"2018"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2024.3364972"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467314"},{"key":"ref35","first-page":"673","article-title":"Adversarial attacks on graph neural networks via node injections: A hierarchical reinforcement learning approach","volume-title":"Proc. Web Conf.","author":"Sun"},{"key":"ref36","first-page":"958","article-title":"Maximizing malicious influence in node injection attack","volume-title":"Proc. 17th ACM Int. Conf. Web Search Data Mining","author":"Zhang"},{"key":"ref37","first-page":"3389","article-title":"A restricted black-box adversarial framework towards attacking graph embedding models","volume-title":"Proc. AAAI Conf. Artif. Intell.","author":"Chang"},{"key":"ref38","first-page":"1161","article-title":"Graph adversarial attack via rewiring","volume-title":"Proc. 27th ACM SIGKDD Conf. Knowl. Discov. Data Mining","author":"Ma"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3153060"},{"key":"ref40","first-page":"8954","article-title":"Are defenses for graph neural networks robust?","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Mujkanovic"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i7.25979"},{"key":"ref42","first-page":"1","article-title":"Empowering graph representation learning with test-time graph transformation","volume-title":"Proc. 11th Int. Conf. Learn. Representations","author":"Jin"},{"key":"ref43","first-page":"169","article-title":"All you need is low (rank) defending against adversarial attacks on graphs","volume-title":"Proc. 13th Int. Conf. Web Search Data Mining","author":"Entezari"},{"key":"ref44","first-page":"66","article-title":"Graph structure learning for robust graph neural networks","volume-title":"Proc. 26th ACM SIGKDD Int. Conf. Knowl. Discov. Data Mining","author":"Jin"},{"key":"ref45","first-page":"1136","article-title":"Graph sanitation with application to node classification","volume-title":"Proc. ACM Web Conf.","author":"Xu"},{"key":"ref46","first-page":"1601","article-title":"Compact graph structure learning via mutual information compression","volume-title":"Proc. ACM Web Conf.","author":"Liu"},{"key":"ref47","first-page":"27387","article-title":"NodeFormer: A scalable graph structure learning transformer for node classification","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wu"},{"key":"ref48","first-page":"1198","article-title":"GUARD: Graph universal adversarial defense","volume-title":"Proc. 32nd ACM Int. Conf. Inf. Knowl. Manage.","author":"Li"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330851"},{"key":"ref50","first-page":"951","article-title":"Enhancing node-level adversarial defenses by lipschitz regularization of graph neural networks","volume-title":"Proc. 29th ACM SIGKDD Conf. Knowl. Discov. Data Mining","author":"Jia"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30098"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671870"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1090\/cbms\/092"},{"key":"ref54","first-page":"6861","article-title":"Simplifying graph convolutional networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Wu"},{"key":"ref55","first-page":"5453","article-title":"Representation learning on graphs with jumping knowledge networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xu"},{"key":"ref56","first-page":"695","article-title":"Adversarial attacks on node embeddings via graph poisoning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Bojchevski"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i5.16514"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3186016"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539418"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1023\/A:1009953814988"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1609\/aimag.v29i3.2157"},{"key":"ref62","first-page":"1","article-title":"Graph attention networks","author":"Velickovic","year":"2023","journal-title":"Proc. 6th Int. Conf. Learn. Representations"},{"key":"ref63","article-title":"DeepRobust: A PyTorch library for adversarial attacks and defenses","author":"Li","year":"2020"}],"container-title":["IEEE Transactions on Knowledge and Data Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/69\/10948402\/10882867.pdf?arnumber=10882867","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,7]],"date-time":"2025-04-07T03:24:46Z","timestamp":1743996286000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10882867\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,5]]},"references-count":63,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tkde.2025.3538645","relation":{},"ISSN":["1041-4347","1558-2191","2326-3865"],"issn-type":[{"value":"1041-4347","type":"print"},{"value":"1558-2191","type":"electronic"},{"value":"2326-3865","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,5]]}}}