{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T04:52:11Z","timestamp":1780635131200,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":55,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,5,30]],"date-time":"2022-05-30T00:00:00Z","timestamp":1653868800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Australian Research Council","award":["FT210100097"],"award-info":[{"award-number":["FT210100097"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,5,30]]},"DOI":"10.1145\/3488932.3497753","type":"proceedings-article","created":{"date-parts":[[2022,5,24]],"date-time":"2022-05-24T04:23:26Z","timestamp":1653366206000},"page":"337-350","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":47,"title":["Model Extraction Attacks on Graph Neural Networks"],"prefix":"10.1145","author":[{"given":"Bang","family":"Wu","sequence":"first","affiliation":[{"name":"Monash University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiangwen","family":"Yang","sequence":"additional","affiliation":[{"name":"Monash University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shirui","family":"Pan","sequence":"additional","affiliation":[{"name":"Monash University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xingliang","family":"Yuan","sequence":"additional","affiliation":[{"name":"Monash University, Melbourne, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,5,30]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proc. ACM SE '2020","author":"Acharya Deepak Bhaskar","unstructured":"Deepak Bhaskar Acharya and Huaming Zhang . [n.,d.]. Feature Selection and Extraction for Graph Neural Networks . In Proc. ACM SE '2020 . Deepak Bhaskar Acharya and Huaming Zhang. [n.,d.]. Feature Selection and Extraction for Graph Neural Networks. In Proc. ACM SE '2020."},{"key":"e_1_3_2_1_2_1","volume-title":"2021 IEEE International Conference on Data Mining (ICDM). IEEE.","author":"Bang Wu","year":"2021","unstructured":"Wu Bang , Yang Xiangwen , Pan Shirui , and Yuan Xingliang . 2021 . Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications . In 2021 IEEE International Conference on Data Mining (ICDM). IEEE. Wu Bang, Yang Xiangwen, Pan Shirui, and Yuan Xingliang. 2021. Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications. In 2021 IEEE International Conference on Data Mining (ICDM). IEEE."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1988688.1988749"},{"key":"e_1_3_2_1_4_1","volume-title":"Exploring connections between active learning and model extraction. arXiv preprint arXiv:1811.02054","author":"Chandrasekaran Varun","year":"2018","unstructured":"Varun Chandrasekaran , Kamalika Chaudhuri , Irene Giacomelli , Somesh Jha , and Songbai Yan . 2018. Exploring connections between active learning and model extraction. arXiv preprint arXiv:1811.02054 ( 2018 ). Varun Chandrasekaran, Kamalika Chaudhuri, Irene Giacomelli, Somesh Jha, and Songbai Yan. 2018. Exploring connections between active learning and model extraction. arXiv preprint arXiv:1811.02054 (2018)."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5741"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242809"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2020.3004059"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330925"},{"key":"e_1_3_2_1_9_1","volume-title":"Mark EJ Newman, and Cristopher Moore","author":"Clauset Aaron","year":"2004","unstructured":"Aaron Clauset , Mark EJ Newman, and Cristopher Moore . 2004 . Finding community structure in very large networks. Physical review E ( 2004). Aaron Clauset, Mark EJ Newman, and Cristopher Moore. 2004. Finding community structure in very large networks. Physical review E (2004)."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2818116"},{"key":"e_1_3_2_1_11_1","volume-title":"Quantifying Privacy Leakage in Graph Embedding. (2020). arxiv","author":"Duddu Vasisht","year":"2010","unstructured":"Vasisht Duddu , Antoine Boutet , and Virat Shejwalkar . 2020. Quantifying Privacy Leakage in Graph Embedding. (2020). arxiv : 2010 .00906 Vasisht Duddu, Antoine Boutet, and Virat Shejwalkar. 2020. Quantifying Privacy Leakage in Graph Embedding. (2020). arxiv: 2010.00906"},{"key":"e_1_3_2_1_12_1","volume-title":"Proc. ICML 2019 (Proceedings of Machine Learning Research).","author":"Franceschi Luca","unstructured":"Luca Franceschi , Mathias Niepert , Massimiliano Pontil , and Xiao He. [n.,d.]. Learning Discrete Structures for Graph Neural Networks . In Proc. ICML 2019 (Proceedings of Machine Learning Research). Luca Franceschi, Mathias Niepert, Massimiliano Pontil, and Xiao He. [n.,d.]. Learning Discrete Structures for Graph Neural Networks. In Proc. ICML 2019 (Proceedings of Machine Learning Research)."},{"key":"e_1_3_2_1_13_1","volume-title":"Tenet: A Neural Network Model Extraction Attack in Multi-core Architecture. In Proc. GLSVLSI '21: Great Lakes Symposium on VLSI 2021. ACM, 21--26","author":"Gao Chengsi","unstructured":"Chengsi Gao , Bing Li , Ying Wang , Weiwei Chen , and Lei Zhang . [n.,d.] a. Tenet: A Neural Network Model Extraction Attack in Multi-core Architecture. In Proc. GLSVLSI '21: Great Lakes Symposium on VLSI 2021. ACM, 21--26 . Chengsi Gao, Bing Li, Ying Wang, Weiwei Chen, and Lei Zhang. [n.,d.] a. Tenet: A Neural Network Model Extraction Attack in Multi-core Architecture. In Proc. GLSVLSI '21: Great Lakes Symposium on VLSI 2021. ACM, 21--26."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3219947"},{"key":"e_1_3_2_1_15_1","volume-title":"Proc. ICML","author":"Gilmer Justin","year":"2017","unstructured":"Justin Gilmer , Samuel S. Schoenholz , Patrick F. Riley , Oriol Vinyals , and George E. Dahl . [n.,d.]. Neural Message Passing for Quantum Chemistry . In Proc. ICML 2017 . Justin Gilmer, Samuel S. Schoenholz, Patrick F. Riley, Oriol Vinyals, and George E. Dahl. [n.,d.]. Neural Message Passing for Quantum Chemistry. In Proc. ICML 2017."},{"key":"e_1_3_2_1_16_1","volume-title":"Proc. USENIX Security 16","author":"Gong Neil Zhenqiang","unstructured":"Neil Zhenqiang Gong and Bin Liu . [n.,d.]. You Are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors . In Proc. USENIX Security 16 . Neil Zhenqiang Gong and Bin Liu. [n.,d.]. You Are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors. In Proc. USENIX Security 16."},{"key":"e_1_3_2_1_17_1","article-title":"Attribute Inference Attacks in Online Social Networks. ACM","volume":"21","author":"Gong Neil Zhenqiang","year":"2018","unstructured":"Neil Zhenqiang Gong and Bin Liu . 2018 . Attribute Inference Attacks in Online Social Networks. ACM Trans. Priv. Secur. , Vol. 21 (2018). Neil Zhenqiang Gong and Bin Liu. 2018. Attribute Inference Attacks in Online Social Networks. ACM Trans. Priv. Secur., Vol. 21 (2018).","journal-title":"Trans. Priv. Secur."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.001.2000196"},{"key":"e_1_3_2_1_19_1","volume-title":"Proc. ASIA CCS '13","author":"Gupta Payas","unstructured":"Payas Gupta , Swapna Gottipati , Jing Jiang , and Debin Gao . [n.,d.]. Your love is public now: questioning the use of personal information in authentication . In Proc. ASIA CCS '13 . Payas Gupta, Swapna Gottipati, Jing Jiang, and Debin Gao. [n.,d.]. Your love is public now: questioning the use of personal information in authentication. In Proc. ASIA CCS '13."},{"key":"e_1_3_2_1_20_1","volume-title":"Neil Zhenqiang Gong, and Yang Zhang","author":"He Xinlei","year":"2020","unstructured":"Xinlei He , Jinyuan Jia , Michael Backes , Neil Zhenqiang Gong, and Yang Zhang . 2020 . Stealing Links from Graph Neural Networks . (2020). arxiv: 2005.02131 Xinlei He, Jinyuan Jia, Michael Backes, Neil Zhenqiang Gong, and Yang Zhang. 2020. Stealing Links from Graph Neural Networks. (2020). arxiv: 2005.02131"},{"key":"e_1_3_2_1_21_1","volume-title":"Proc. {USENIX} Security","author":"Jagielski Matthew","year":"2020","unstructured":"Matthew Jagielski , Nicholas Carlini , David Berthelot , Alex Kurakin , and Nicolas Papernot . [n.,d.]. High Accuracy and High Fidelity Extraction of Neural Networks . In Proc. {USENIX} Security 2020 . Matthew Jagielski, Nicholas Carlini, David Berthelot, Alex Kurakin, and Nicolas Papernot. [n.,d.]. High Accuracy and High Fidelity Extraction of Neural Networks. In Proc. {USENIX} Security 2020."},{"key":"e_1_3_2_1_22_1","volume-title":"Proc. USENIX Security","author":"Jia Jinyuan","year":"2018","unstructured":"Jinyuan Jia and Neil Zhenqiang Gong . [n.,d.]. AttriGuard : A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning . In Proc. USENIX Security 2018 . Jinyuan Jia and Neil Zhenqiang Gong. [n.,d.]. AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning. In Proc. USENIX Security 2018."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274740"},{"key":"e_1_3_2_1_25_1","volume-title":"Proc. ICLR","author":"Thomas","year":"2017","unstructured":"Thomas N. Kipf and Max Welling. [n.,d.]. Semi-Supervised Classification with Graph Convolutional Networks . In Proc. ICLR 2017 . Thomas N. Kipf and Max Welling. [n.,d.]. Semi-Supervised Classification with Graph Convolutional Networks. In Proc. ICLR 2017."},{"key":"e_1_3_2_1_26_1","volume-title":"Proc. ICLR","author":"Klicpera Johannes","year":"2019","unstructured":"Johannes Klicpera , Aleksandar Bojchevski , and Stephan G\u00fc nnemann. [n.,d.]. Predict then Propagate: Graph Neural Networks meet Personalized PageRank . In Proc. ICLR 2019 . Johannes Klicpera, Aleksandar Bojchevski, and Stephan G\u00fc nnemann. [n.,d.]. Predict then Propagate: Graph Neural Networks meet Personalized PageRank. In Proc. ICLR 2019."},{"key":"e_1_3_2_1_27_1","volume-title":"Defending Against Neural Network Model Stealing Attacks Using Deceptive Perturbations. In 2019 IEEE Security and Privacy Workshops.","author":"Lee Taesung","unstructured":"Taesung Lee , Benjamin Edwards , Ian Molloy , and Dong Su. [n.,d.]. Defending Against Neural Network Model Stealing Attacks Using Deceptive Perturbations. In 2019 IEEE Security and Privacy Workshops. Taesung Lee, Benjamin Edwards, Ian Molloy, and Dong Su. [n.,d.]. Defending Against Neural Network Model Stealing Attacks Using Deceptive Perturbations. In 2019 IEEE Security and Privacy Workshops."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380171"},{"key":"e_1_3_2_1_29_1","volume-title":"Deep Learning Backdoors. CoRR","author":"Li Shaofeng","year":"2020","unstructured":"Shaofeng Li , Shiqing Ma , Minhui Xue , and Benjamin Zi Hao Zhao . 2020. Deep Learning Backdoors. CoRR , Vol. abs\/ 2007 .08273 ( 2020 ). Shaofeng Li, Shiqing Ma, Minhui Xue, and Benjamin Zi Hao Zhao. 2020. Deep Learning Backdoors. CoRR, Vol. abs\/2007.08273 (2020)."},{"key":"e_1_3_2_1_30_1","volume-title":"Battaglia","author":"Li Yujia","year":"2018","unstructured":"Yujia Li , Oriol Vinyals , Chris Dyer , Razvan Pascanu , and Peter W . Battaglia . 2018 . Learning Deep Generative Models of Graphs. CoRR , Vol. abs\/ 1803 .03324 (2018). Yujia Li, Oriol Vinyals, Chris Dyer, Razvan Pascanu, and Peter W. Battaglia. 2018. Learning Deep Generative Models of Graphs. CoRR, Vol. abs\/1803.03324 (2018)."},{"key":"e_1_3_2_1_31_1","volume-title":"Graph Adversarial Networks: Protecting Information against Adversarial Attacks. CoRR","author":"Liao Peiyuan","year":"2020","unstructured":"Peiyuan Liao , Han Zhao , Keyulu Xu , Tommi S. Jaakkola , Geoffrey J. Gordon , Stefanie Jegelka , and Ruslan Salakhutdinov . 2020. Graph Adversarial Networks: Protecting Information against Adversarial Attacks. CoRR , Vol. abs\/ 2009 .13504 ( 2020 ). Peiyuan Liao, Han Zhao, Keyulu Xu, Tommi S. Jaakkola, Geoffrey J. Gordon, Stefanie Jegelka, and Ruslan Salakhutdinov. 2020. Graph Adversarial Networks: Protecting Information against Adversarial Attacks. CoRR, Vol. abs\/2009.13504 (2020)."},{"key":"e_1_3_2_1_32_1","volume-title":"Proc. NeurIPS.","author":"Ma Jiaqi","year":"2020","unstructured":"Jiaqi Ma , Shuangrui Ding , and Qiaozhu Mei . 2020 . Towards More Practical Adversarial Attacks on Graph Neural Networks . In Proc. NeurIPS. Jiaqi Ma, Shuangrui Ding, and Qiaozhu Mei. 2020. Towards More Practical Adversarial Attacks on Graph Neural Networks. In Proc. NeurIPS."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3287560.3287562"},{"key":"e_1_3_2_1_34_1","unstructured":"Xichuan Niu Bofang Li Chenliang Li Rong Xiao Haochuan Sun Hongbo Deng and Zhenzhong Chen. 2020. A Dual Heterogeneous Graph Attention Network to Improve Long-Tail Performance for Shop Search in E-Commerce. In KDD. ACM 3405--3415.  Xichuan Niu Bofang Li Chenliang Li Rong Xiao Haochuan Sun Hongbo Deng and Zhenzhong Chen. 2020. A Dual Heterogeneous Graph Attention Network to Improve Long-Tail Performance for Shop Search in E-Commerce. In KDD. ACM 3405--3415."},{"key":"e_1_3_2_1_35_1","unstructured":"Seong Joon Oh Bernt Schiele and Mario Fritz. 2019. Towards Reverse-Engineering Black-Box Neural Networks. In Explainable AI: Interpreting Explaining and Visualizing Deep Learning.  Seong Joon Oh Bernt Schiele and Mario Fritz. 2019. Towards Reverse-Engineering Black-Box Neural Networks. In Explainable AI: Interpreting Explaining and Visualizing Deep Learning."},{"key":"e_1_3_2_1_36_1","volume-title":"Knockoff Nets: Stealing Functionality of Black-Box Models. In Proc. CVPR","author":"Orekondy Tribhuvanesh","year":"2019","unstructured":"Tribhuvanesh Orekondy , Bernt Schiele , and Mario Fritz . [n.,d.]. Knockoff Nets: Stealing Functionality of Black-Box Models. In Proc. CVPR 2019 . Tribhuvanesh Orekondy, Bernt Schiele, and Mario Fritz. [n.,d.]. Knockoff Nets: Stealing Functionality of Black-Box Models. In Proc. CVPR 2019."},{"key":"e_1_3_2_1_37_1","volume-title":"A framework for the extraction of Deep Neural Networks by leveraging public data. CoRR","author":"Pal Soham","year":"2019","unstructured":"Soham Pal , Yash Gupta , Aditya Shukla , Aditya Kanade , Shirish K. Shevade , and Vinod Ganapathy . 2019. A framework for the extraction of Deep Neural Networks by leveraging public data. CoRR , Vol. abs\/ 1905 .09165 ( 2019 ). Soham Pal, Yash Gupta, Aditya Shukla, Aditya Kanade, Shirish K. Shevade, and Vinod Ganapathy. 2019. A framework for the extraction of Deep Neural Networks by leveraging public data. CoRR, Vol. abs\/1905.09165 (2019)."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3338498.3358646"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"e_1_3_2_1_40_1","unstructured":"Julien Simon. 2019. Now Available on Amazon SageMaker: The Deep Graph Library. https:\/\/aws.amazon.com\/blogs\/aws\/now-available-on-amazon-sagemaker-the-deep-graph-library\/  Julien Simon. 2019. Now Available on Amazon SageMaker: The Deep Graph Library. https:\/\/aws.amazon.com\/blogs\/aws\/now-available-on-amazon-sagemaker-the-deep-graph-library\/"},{"key":"e_1_3_2_1_41_1","volume-title":"Proc. USENIX Security 16","author":"Tram\u00e8r Florian","unstructured":"Florian Tram\u00e8r , Fan Zhang , Ari Juels , Michael K. Reiter , and Thomas Ristenpart . [n.,d.]. Stealing Machine Learning Models via Prediction APIs . In Proc. USENIX Security 16 . Florian Tram\u00e8r, Fan Zhang, Ari Juels, Michael K. Reiter, and Thomas Ristenpart. [n.,d.]. Stealing Machine Learning Models via Prediction APIs. In Proc. USENIX Security 16."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCC.2016.10"},{"key":"e_1_3_2_1_43_1","volume-title":"Contrastive Graph Poisson Networks: Semi-Supervised Learning with Extremely Limited Labels. In Thirty-Fifth Conference on Neural Information Processing Systems.","author":"Wan Sheng","year":"2021","unstructured":"Sheng Wan , Yibing Zhan , Liu Liu , Baosheng Yu , Shirui Pan , and Chen Gong . 2021 . Contrastive Graph Poisson Networks: Semi-Supervised Learning with Extremely Limited Labels. In Thirty-Fifth Conference on Neural Information Processing Systems. Sheng Wan, Yibing Zhan, Liu Liu, Baosheng Yu, Shirui Pan, and Chen Gong. 2021. Contrastive Graph Poisson Networks: Semi-Supervised Learning with Extremely Limited Labels. In Thirty-Fifth Conference on Neural Information Processing Systems."},{"key":"e_1_3_2_1_44_1","volume-title":"Proc. the 2019 ACM SIGSAC Conference on Computer and Communications Security, CCS 2019. ACM","author":"Wang Binghui","unstructured":"Binghui Wang and Neil Zhenqiang Gong . [n.,d.]. Attacking Graph-based Classification via Manipulating the Graph Structure . In Proc. the 2019 ACM SIGSAC Conference on Computer and Communications Security, CCS 2019. ACM , 2023--2040. Binghui Wang and Neil Zhenqiang Gong. [n.,d.]. Attacking Graph-based Classification via Manipulating the Graph Structure. In Proc. the 2019 ACM SIGSAC Conference on Computer and Communications Security, CCS 2019. ACM, 2023--2040."},{"key":"e_1_3_2_1_45_1","volume-title":"Evasion Attacks to Graph Neural Networks via Influence Function. CoRR","author":"Wang Binghui","year":"2020","unstructured":"Binghui Wang , Tianxiang Zhou , Minhua Lin , Pan Zhou , Ang Li , Meng Pang , Cai Fu , Hai Li , and Yiran Chen . 2020. Evasion Attacks to Graph Neural Networks via Influence Function. CoRR , Vol. abs\/ 2009 .00203 ( 2020 ). Binghui Wang, Tianxiang Zhou, Minhua Lin, Pan Zhou, Ang Li, Meng Pang, Cai Fu, Hai Li, and Yiran Chen. 2020. Evasion Attacks to Graph Neural Networks via Influence Function. CoRR, Vol. abs\/2009.00203 (2020)."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v30i1.9977"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/669"},{"key":"e_1_3_2_1_48_1","volume-title":"Proc. WiseML@WiSec 2021: Proceedings of the 3rd ACM Workshop on Wireless Security and Machine Learning, Christina P\u00f6pper and Mathy Vanhoef (Eds.). ACM, 31--36","author":"Xu Jing","unstructured":"Jing Xu , Minhui Xue , and Stjepan Picek . [n.,d.]. Explainability-based Backdoor Attacks Against Graph Neural Networks . In Proc. WiseML@WiSec 2021: Proceedings of the 3rd ACM Workshop on Wireless Security and Machine Learning, Christina P\u00f6pper and Mathy Vanhoef (Eds.). ACM, 31--36 . Jing Xu, Minhui Xue, and Stjepan Picek. [n.,d.]. Explainability-based Backdoor Attacks Against Graph Neural Networks. In Proc. WiseML@WiSec 2021: Proceedings of the 3rd ACM Workshop on Wireless Security and Machine Learning, Christina P\u00f6pper and Mathy Vanhoef (Eds.). ACM, 31--36."},{"key":"e_1_3_2_1_49_1","volume-title":"GraphRNN: A Deep Generative Model for Graphs. CoRR","author":"You Jiaxuan","year":"2018","unstructured":"Jiaxuan You , Rex Ying , Xiang Ren , William L. Hamilton , and Jure Leskovec . 2018. GraphRNN: A Deep Generative Model for Graphs. CoRR , Vol. abs\/ 1802 .08773 ( 2018 ). Jiaxuan You, Rex Ying, Xiang Ren, William L. Hamilton, and Jure Leskovec. 2018. GraphRNN: A Deep Generative Model for Graphs. CoRR, Vol. abs\/1802.08773 (2018)."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"crossref","unstructured":"He Zhang Bang Wu Xiangwen Yang Chuan Zhou Shuo Wang Xingliang Yuan and Shirui Pan. 2021 b. Projective Ranking: A Transferable Evasion Attack Method on Graph Neural Networks. In CIKM. ACM 3617--3621.  He Zhang Bang Wu Xiangwen Yang Chuan Zhou Shuo Wang Xingliang Yuan and Shirui Pan. 2021 b. Projective Ranking: A Transferable Evasion Attack Method on Graph Neural Networks. In CIKM. ACM 3617--3621.","DOI":"10.1145\/3459637.3482161"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/674"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3450569.3463560"},{"key":"e_1_3_2_1_53_1","volume-title":"Advances in Neural Information Processing Systems 33 (NeurIPS","author":"Zhu Shichao","year":"2020","unstructured":"Shichao Zhu , Shirui Pan , Chuan Zhou , Jia Wu , Yanan Cao , and Bin Wang . 2020. Graph Geometry Interaction Learning . In Advances in Neural Information Processing Systems 33 (NeurIPS 2020 ). Shichao Zhu, Shirui Pan, Chuan Zhou, Jia Wu, Yanan Cao, and Bin Wang. 2020. Graph Geometry Interaction Learning. In Advances in Neural Information Processing Systems 33 (NeurIPS 2020)."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"crossref","unstructured":"Marinka Zitnik Jure Leskovec etal 2018. Prioritizing network communities. Nature communications (2018).  Marinka Zitnik Jure Leskovec et al. 2018. Prioritizing network communities. Nature communications (2018).","DOI":"10.1101\/315903"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/872"}],"event":{"name":"ASIA CCS '22: ACM Asia Conference on Computer and Communications Security","location":"Nagasaki Japan","acronym":"ASIA CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3488932.3497753","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3488932.3497753","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:48:28Z","timestamp":1750193308000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3488932.3497753"}},"subtitle":["Taxonomy and Realisation"],"short-title":[],"issued":{"date-parts":[[2022,5,30]]},"references-count":55,"alternative-id":["10.1145\/3488932.3497753","10.1145\/3488932"],"URL":"https:\/\/doi.org\/10.1145\/3488932.3497753","relation":{},"subject":[],"published":{"date-parts":[[2022,5,30]]},"assertion":[{"value":"2022-05-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}