{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T11:03:27Z","timestamp":1786100607090,"version":"3.56.0"},"publisher-location":"New York, NY, USA","reference-count":52,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,4,20]],"date-time":"2020-04-20T00:00:00Z","timestamp":1587340800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,4,20]]},"DOI":"10.1145\/3366423.3380149","type":"proceedings-article","created":{"date-parts":[[2020,5,4]],"date-time":"2020-05-04T08:11:44Z","timestamp":1588579904000},"page":"673-683","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":142,"title":["Adversarial Attacks on Graph Neural Networks via Node Injections: A Hierarchical Reinforcement Learning Approach"],"prefix":"10.1145","author":[{"given":"Yiwei","family":"Sun","sequence":"first","affiliation":[{"name":"The Pennsylvania State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Suhang","family":"Wang","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xianfeng","family":"Tang","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tsung-Yu","family":"Hsieh","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vasant","family":"Honavar","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,4,20]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"crossref","volume-title":"Social network data analytics","author":"Aggarwal C","DOI":"10.1007\/978-1-4419-8462-3"},{"key":"e_1_3_2_1_2_1","volume-title":"Emergence of scaling in random networks. science 286, 5439","author":"Barab\u00e1si Albert-L\u00e1szl\u00f3","year":"1999"},{"key":"e_1_3_2_1_3_1","volume-title":"29th Int\u2019l Conf. on Machine Learning (ICML).","author":"Biggio Battista","year":"2012"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2018.07.023"},{"key":"e_1_3_2_1_5_1","volume-title":"International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=r1ZdKJ-0W","author":"Bojchevski Aleksandar","year":"2018"},{"key":"e_1_3_2_1_6_1","volume-title":"Netgan: Generating graphs via random walks. arXiv preprint arXiv:1803.00816(2018).","author":"Bojchevski Aleksandar","year":"2018"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3018661.3018702"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"key":"e_1_3_2_1_9_1","volume-title":"Narcissism on Facebook: Self-promotional and anti-social behavior. Personality and individual differences 52, 4","author":"Carpenter J","year":"2012"},{"key":"e_1_3_2_1_10_1","unstructured":"Jinyin Chen Yangyang Wu Xuanheng Xu Yixian Chen Haibin Zheng and Qi Xuan. 2018. Fast gradient attack on network embedding. arXiv preprint arXiv:1809.02797(2018).  Jinyin Chen Yangyang Wu Xuanheng Xu Yixian Chen Haibin Zheng and Qi Xuan. 2018. Fast gradient attack on network embedding. arXiv preprint arXiv:1809.02797(2018)."},{"key":"e_1_3_2_1_11_1","volume-title":"International conference on machine learning. 2702\u20132711","author":"Dai Hanjun","year":"2016"},{"key":"e_1_3_2_1_12_1","unstructured":"Hanjun Dai Hui Li Tian Tian Xin Huang Lin Wang Jun Zhu and Le Song. 2018. Adversarial attack on graph structured data. arXiv preprint arXiv:1806.02371(2018).  Hanjun Dai Hui Li Tian Tian Xin Huang Lin Wang Jun Zhu and Le Song. 2018. Adversarial attack on graph structured data. arXiv preprint arXiv:1806.02371(2018)."},{"key":"e_1_3_2_1_13_1","unstructured":"Micha\u00ebl Defferrard Xavier Bresson and Pierre Vandergheynst. 2016. Convolutional neural networks on graphs with fast localized spectral filtering. In Advances in neural information processing systems. 3844\u20133852.  Micha\u00ebl Defferrard Xavier Bresson and Pierre Vandergheynst. 2016. Convolutional neural networks on graphs with fast localized spectral filtering. In Advances in neural information processing systems. 3844\u20133852."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330958"},{"key":"e_1_3_2_1_15_1","first-page":"17","article-title":"On the evolution of random graphs","volume":"5","author":"Erd\u0151s Paul","year":"1960","journal-title":"Publ. Math. Inst. Hung. Acad. Sci"},{"key":"e_1_3_2_1_16_1","volume-title":"Graph Neural Networks for Social Recommendation. In The World Wide Web Conference. ACM, 417\u2013426","author":"Fan Wenqi","year":"2019"},{"key":"e_1_3_2_1_17_1","unstructured":"C\u00a0Lee Giles Kurt\u00a0D Bollacker and Steve Lawrence. 1998. CiteSeer: An Automatic Citation Indexing System.. In ACM DL. 89\u201398.  C\u00a0Lee Giles Kurt\u00a0D Bollacker and Steve Lawrence. 1998. CiteSeer: An Automatic Citation Indexing System.. In ACM DL. 89\u201398."},{"key":"e_1_3_2_1_18_1","volume-title":"Adversarial Policies: Attacking Deep Reinforcement Learning. arXiv preprint arXiv:1905.10615(2019).","author":"Gleave Adam","year":"2019"},{"key":"e_1_3_2_1_19_1","volume-title":"International Conference on Learning Representations.","author":"Goodfellow J","year":"2015"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313533"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2015.89"},{"key":"e_1_3_2_1_22_1","unstructured":"Kwang-Sung Jun Lihong Li Yuzhe Ma and Jerry Zhu. 2018. Adversarial attacks on stochastic bandits. In Advances in Neural Information Processing Systems. 3640\u20133649.  Kwang-Sung Jun Lihong Li Yuzhe Ma and Jerry Zhu. 2018. Adversarial attacks on stochastic bandits. In Advances in Neural Information Processing Systems. 3640\u20133649."},{"key":"e_1_3_2_1_23_1","unstructured":"Thomas\u00a0N Kipf and Max Welling. 2016. Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907(2016).  Thomas\u00a0N Kipf and Max Welling. 2016. Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907(2016)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3269206.3272010"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01554-1_11"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330982"},{"key":"e_1_3_2_1_27_1","unstructured":"Yao Ma Suhang Wang Lingfei Wu and Jiliang Tang. 2019. Attacking graph convolutional networks via rewiring. arXiv preprint arXiv:1906.03750(2019).  Yao Ma Suhang Wang Lingfei Wu and Jiliang Tang. 2019. Attacking graph convolutional networks via rewiring. arXiv preprint arXiv:1906.03750(2019)."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1009953814988"},{"key":"e_1_3_2_1_29_1","volume-title":"The 29th AAAI Conference on Artificial Intelligence.","author":"Mei Shike","year":"2015"},{"key":"e_1_3_2_1_30_1","volume-title":"Human-level control through deep reinforcement learning. Nature 518, 7540","author":"Mnih Volodymyr","year":"2015"},{"key":"e_1_3_2_1_31_1","volume-title":"Friendship selection in the social internet of things: challenges and possible strategies","author":"Nitti Michele","year":"2014"},{"key":"e_1_3_2_1_32_1","first-page":"12","article-title":"Tri-party deep network representation","volume":"11","author":"Pan Shirui","year":"2016","journal-title":"Network"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/s12599-017-0464-6"},{"key":"e_1_3_2_1_34_1","volume-title":"International conference on machine learning. 1889\u20131897","author":"Schulman John","year":"2015"},{"key":"e_1_3_2_1_35_1","volume-title":"Megan: A generative adversarial network for multi-view network embedding. arXiv preprint arXiv:1909.01084(2019).","author":"Sun Yiwei","year":"2019"},{"key":"e_1_3_2_1_36_1","unstructured":"Richard\u00a0S Sutton and Andrew\u00a0G Barto. 2018. Reinforcement learning: An introduction.  Richard\u00a0S Sutton and Andrew\u00a0G Barto. 2018. Reinforcement learning: An introduction."},{"key":"e_1_3_2_1_37_1","unstructured":"Christian Szegedy Wojciech Zaremba Ilya Sutskever Joan Bruna Dumitru Erhan Ian Goodfellow and Rob Fergus. 2013. Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199(2013).  Christian Szegedy Wojciech Zaremba Ilya Sutskever Joan Bruna Dumitru Erhan Ian Goodfellow and Rob Fergus. 2013. Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199(2013)."},{"key":"e_1_3_2_1_38_1","volume-title":"Transferring Robustness for Graph Neural Network Against Poisoning Attacks. In ACM Internatioal Conference on Web Search and Data Mining (WSDM).","author":"Tang Xianfeng","year":"2020"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354206"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939753"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3308560.3316586"},{"key":"e_1_3_2_1_42_1","volume-title":"Nervenet: Learning structured policy with graph neural networks.","author":"Wang Tingwu","year":"2018"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3077136.3080685"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/669"},{"key":"e_1_3_2_1_45_1","unstructured":"Han Xu Yao Ma Haochen Liu Debayan Deb Hui Liu Jiliang Tang and Anil Jain. 2019. Adversarial attacks and defenses in images graphs and text: A review. arXiv preprint arXiv:1909.08072(2019).  Han Xu Yao Ma Haochen Liu Debayan Deb Hui Liu Jiliang Tang and Anil Jain. 2019. Adversarial attacks and defenses in images graphs and text: A review. arXiv preprint arXiv:1909.08072(2019)."},{"key":"e_1_3_2_1_46_1","volume-title":"CoaCor: Code Annotation for Code Retrieval with Reinforcement Learning. In The World Wide Web Conference. ACM, 2203\u20132214","author":"Yao Ziyu","year":"2019"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3219890"},{"key":"e_1_3_2_1_48_1","unstructured":"Jiaxuan You Bowen Liu Zhitao Ying Vijay Pande and Jure Leskovec. 2018. Graph convolutional policy network for goal-directed molecular graph generation. In Advances in Neural Information Processing Systems. 6410\u20136421.  Jiaxuan You Bowen Liu Zhitao Ying Vijay Pande and Jure Leskovec. 2018. Graph convolutional policy network for goal-directed molecular graph generation. In Advances in Neural Information Processing Systems. 6410\u20136421."},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-91458-9_32"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313537"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"crossref","unstructured":"Daniel Z\u00fcgner Amir Akbarnejad and Stephan G\u00fcnnemann. 2018. Adversarial Attacks on Neural Networks for Graph Data. In SIGKDD. 2847\u20132856.  Daniel Z\u00fcgner Amir Akbarnejad and Stephan G\u00fcnnemann. 2018. Adversarial Attacks on Neural Networks for Graph Data. In SIGKDD. 2847\u20132856.","DOI":"10.1145\/3219819.3220078"},{"key":"e_1_3_2_1_52_1","volume-title":"International Conference on Learning Representations (ICLR).","author":"Z\u00fcgner Daniel","year":"2019"}],"event":{"name":"WWW '20: The Web Conference 2020","location":"Taipei Taiwan","acronym":"WWW '20","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of The Web Conference 2020"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3366423.3380149","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3366423.3380149","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:33:00Z","timestamp":1750199580000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3366423.3380149"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,4,20]]},"references-count":52,"alternative-id":["10.1145\/3366423.3380149","10.1145\/3366423"],"URL":"https:\/\/doi.org\/10.1145\/3366423.3380149","relation":{},"subject":[],"published":{"date-parts":[[2020,4,20]]},"assertion":[{"value":"2020-04-20","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}