{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,17]],"date-time":"2026-02-17T03:39:12Z","timestamp":1771299552410,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":32,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T00:00:00Z","timestamp":1667779200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,11]]},"DOI":"10.1145\/3560830.3563734","type":"proceedings-article","created":{"date-parts":[[2022,11,2]],"date-time":"2022-11-02T22:32:41Z","timestamp":1667428361000},"page":"1-12","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":26,"title":["Label-Only Membership Inference Attack against Node-Level Graph Neural Networks"],"prefix":"10.1145","author":[{"given":"Mauro","family":"Conti","sequence":"first","affiliation":[{"name":"University of Padua & Delft University of Technology, Padova, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiaxin","family":"Li","sequence":"additional","affiliation":[{"name":"University of Padua, Padova, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stjepan","family":"Picek","sequence":"additional","affiliation":[{"name":"Radboud University & Delft University of Technology, Nijmegen, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jing","family":"Xu","sequence":"additional","affiliation":[{"name":"Delft University of Technology, Delft, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,11,7]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"Proceedings of the 21st IEEE International Conference on Data Mining, ICDM 2021","author":"Bang Wu","year":"2021","unstructured":"Wu Bang , Yang Xiangwen , Pan Shirui , and Yuan Xingliang . 2021 . Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications . In Proceedings of the 21st IEEE International Conference on Data Mining, ICDM 2021 , Auckland, New Zealand, December 7--10 , 2021. IEEE Computer Society, Los Alamitos, CA, USA, 1421--1426. Wu Bang, Yang Xiangwen, Pan Shirui, and Yuan Xingliang. 2021. Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implications. In Proceedings of the 21st IEEE International Conference on Data Mining, ICDM 2021, Auckland, New Zealand, December 7--10, 2021. IEEE Computer Society, Los Alamitos, CA, USA, 1421--1426."},{"key":"e_1_3_2_2_2_1","volume-title":"Proceedings of the 6th International Conference on Learning Representations, ICLR 2018","author":"Bojchevski Aleksandar","year":"2018","unstructured":"Aleksandar Bojchevski and Stephan G\u00fc nnemann. 2018 . Deep Gaussian Embedding of Graphs: Unsupervised Inductive Learning via Ranking . In Proceedings of the 6th International Conference on Learning Representations, ICLR 2018 , Vancouver, BC, Canada, April 30 - May 3, 2019. OpenReview.net, Amherst, MA, USA. Aleksandar Bojchevski and Stephan G\u00fc nnemann. 2018. Deep Gaussian Embedding of Graphs: Unsupervised Inductive Learning via Ranking. In Proceedings of the 6th International Conference on Learning Representations, ICLR 2018, Vancouver, BC, Canada, April 30 - May 3, 2019. OpenReview.net, Amherst, MA, USA."},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833649"},{"key":"e_1_3_2_2_4_1","volume-title":"Proceedings of the 38th International Conference on Machine Learning, ICML 2021, Virtual Event, July 18--24","volume":"139","author":"Choquette-Choo Christopher A.","year":"2021","unstructured":"Christopher A. Choquette-Choo , Florian Tramer , Nicholas Carlini , and Nicolas Papernot . 2021 . Label-Only Membership Inference Attacks . In Proceedings of the 38th International Conference on Machine Learning, ICML 2021, Virtual Event, July 18--24 , 2021, Vol. 139 . PMLR, 1964--1974. Christopher A. Choquette-Choo, Florian Tramer, Nicholas Carlini, and Nicolas Papernot. 2021. Label-Only Membership Inference Attacks. In Proceedings of the 38th International Conference on Machine Learning, ICML 2021, Virtual Event, July 18--24, 2021, Vol. 139. PMLR, 1964--1974."},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3575637.3575646"},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3448891.3448939"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313488"},{"key":"e_1_3_2_2_8_1","volume-title":"Proceedings of the Advances in Neural Information Processing Systems 30","volume":"30","author":"Hamilton Will","year":"2017","unstructured":"Will Hamilton , Zhitao Ying , and Jure Leskovec . 2017 . Inductive Representation Learning on Large Graphs . In Proceedings of the Advances in Neural Information Processing Systems 30 , NeurIPS 2017, Long Beach, CA, USA, December 4--9, 2017, Vol. 30 . Curran Associates, Inc., Red Hook, NY, USA. Will Hamilton, Zhitao Ying, and Jure Leskovec. 2017. Inductive Representation Learning on Large Graphs. In Proceedings of the Advances in Neural Information Processing Systems 30, NeurIPS 2017, Long Beach, CA, USA, December 4--9, 2017, Vol. 30. Curran Associates, Inc., Red Hook, NY, USA."},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0008"},{"key":"e_1_3_2_2_10_1","volume-title":"Node-Level Membership Inference Attacks Against Graph Neural Networks. CoRR","author":"He Xinlei","year":"2021","unstructured":"Xinlei He , Rui Wen , Yixin Wu , Michael Backes , Yun Shen , and Yang Zhang . 2021. Node-Level Membership Inference Attacks Against Graph Neural Networks. CoRR , Vol. abs\/ 2102 .05429 ( 2021 ). Xinlei He, Rui Wen, Yixin Wu, Michael Backes, Yun Shen, and Yang Zhang. 2021. Node-Level Membership Inference Attacks Against Graph Neural Networks. CoRR , Vol. abs\/2102.05429 (2021)."},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-022-00454-y"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24293"},{"key":"e_1_3_2_2_13_1","volume-title":"Proceedings of the 5th International Conference on Learning Representations, ICLR 2017","author":"Thomas","year":"2017","unstructured":"Thomas N. Kipf and Max Welling. 2017. Semi-supervised classification with graph convolutional networks . In Proceedings of the 5th International Conference on Learning Representations, ICLR 2017 , Toulon, France, April 24--26 , 2017 . OpenReview.net, Amherst, MA, USA. Thomas N. Kipf and Max Welling. 2017. Semi-supervised classification with graph convolutional networks. In Proceedings of the 5th International Conference on Learning Representations, ICLR 2017, Toulon, France, April 24--26, 2017. OpenReview.net, Amherst, MA, USA."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484575"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00040"},{"key":"e_1_3_2_2_16_1","volume-title":"Proceedings of the Advances in Neural Information Processing Systems 30","volume":"30","author":"Lundberg Scott M","year":"2017","unstructured":"Scott M Lundberg and Su-In Lee . 2017 . A Unified Approach to Interpreting Model Predictions . In Proceedings of the Advances in Neural Information Processing Systems 30 , NeurIPS 2017, Long Beach, CA, USA, December 4--9, 2017, Vol. 30 . Curran Associates, Inc., Red Hook, NY, USA. Scott M Lundberg and Su-In Lee. 2017. A Unified Approach to Interpreting Model Predictions. In Proceedings of the Advances in Neural Information Processing Systems 30, NeurIPS 2017, Long Beach, CA, USA, December 4--9, 2017, Vol. 30. Curran Associates, Inc., Red Hook, NY, USA."},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPSISA52974.2021.00002"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3474369.3486876"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/DRCN53993.2022.9758025"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23119"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33013060"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330885"},{"key":"e_1_3_2_2_24_1","volume-title":"Proceedings of the 30th USENIX Security Symposium, USENIX Security 2021","author":"Song Liwei","year":"2021","unstructured":"Liwei Song and Prateek Mittal . 2021 . Systematic Evaluation of Privacy Risks of Machine Learning Models . In Proceedings of the 30th USENIX Security Symposium, USENIX Security 2021 , Vancouver, B.C., Canada, August 11--13 , 2021, Michael Bailey and Rachel Greenstadt (Eds.). USENIX Association, 2615--2632. Liwei Song and Prateek Mittal. 2021. Systematic Evaluation of Privacy Risks of Machine Learning Models. In Proceedings of the 30th USENIX Security Symposium, USENIX Security 2021, Vancouver, B.C., Canada, August 11--13, 2021, Michael Bailey and Rachel Greenstadt (Eds.). USENIX Association, 2615--2632."},{"key":"e_1_3_2_2_25_1","volume-title":"Lei Yu, and Wenqi Wei.","author":"Truex Stacey","year":"2018","unstructured":"Stacey Truex , Ling Liu , Mehmet Emre Gursoy , Lei Yu, and Wenqi Wei. 2018 . Towards Demystifying Membership Inference Attacks. CoRR , Vol. abs\/ 1807 .09173 (2018). Stacey Truex, Ling Liu, Mehmet Emre Gursoy, Lei Yu, and Wenqi Wei. 2018. Towards Demystifying Membership Inference Attacks. CoRR , Vol. abs\/1807.09173 (2018)."},{"key":"e_1_3_2_2_26_1","volume-title":"Proceedings of the 6th International Conference on Learning Representations, ICLR 2018","author":"Velikovi Petar","year":"2018","unstructured":"Petar Velikovi , Guillem Cucurull , Arantxa Casanova , Adriana Romero , Pietro Li\u00f2 , and Yoshua Bengio . 2018 . Graph Attention Networks . In Proceedings of the 6th International Conference on Learning Representations, ICLR 2018 , Vancouver, BC, Canada, April 30 - May 3, 2018. OpenReview.net, Amherst, MA, USA. Petar Velikovi, Guillem Cucurull, Arantxa Casanova, Adriana Romero, Pietro Li\u00f2, and Yoshua Bengio. 2018. Graph Attention Networks. In Proceedings of the 6th International Conference on Learning Representations, ICLR 2018, Vancouver, BC, Canada, April 30 - May 3, 2018. OpenReview.net, Amherst, MA, USA."},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330836"},{"key":"e_1_3_2_2_28_1","volume-title":"Proceedings of the 7th International Conference on Learning Representations, ICLR 2019","author":"Xu Keyulu","year":"2019","unstructured":"Keyulu Xu , Weihua Hu , Jure Leskovec , and Stefanie Jegelka . 2019 . How Powerful are Graph Neural Networks? . In Proceedings of the 7th International Conference on Learning Representations, ICLR 2019 , New Orleans, LA, USA, May 6--9 , 2019. OpenReview.net, Amherst, MA, USA. Keyulu Xu, Weihua Hu, Jure Leskovec, and Stefanie Jegelka. 2019. How Powerful are Graph Neural Networks?. In Proceedings of the 7th International Conference on Learning Representations, ICLR 2019, New Orleans, LA, USA, May 6--9, 2019. OpenReview.net, Amherst, MA, USA."},{"key":"e_1_3_2_2_29_1","volume-title":"Proceedings of the 35th International Conference on Machine Learning, ICML 2018, Stockholmsm\"a ssan","volume":"80","author":"Xu Keyulu","year":"2018","unstructured":"Keyulu Xu , Chengtao Li , Yonglong Tian , Tomohiro Sonobe , Ken-ichi Kawarabayashi, and Stefanie Jegelka . 2018 . Representation Learning on Graphs with Jumping Knowledge Networks . In Proceedings of the 35th International Conference on Machine Learning, ICML 2018, Stockholmsm\"a ssan , Stockholm, Sweden, July 10--15 , 2019, Vol. 80 . PMLR, 5449--5458. Keyulu Xu, Chengtao Li, Yonglong Tian, Tomohiro Sonobe, Ken-ichi Kawarabayashi, and Stefanie Jegelka. 2018. Representation Learning on Graphs with Jumping Knowledge Networks. In Proceedings of the 35th International Conference on Machine Learning, ICML 2018, Stockholmsm\"a ssan, Stockholm, Sweden, July 10--15, 2019, Vol. 80. PMLR, 5449--5458."},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2018.00027"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.5555\/3367471.3367643"},{"key":"e_1_3_2_2_32_1","volume-title":"Proceedings of the 31st USENIX Security Symposium, USENIX Security 2022","author":"Zhang Zhikun","year":"2022","unstructured":"Zhikun Zhang , Min Chen , Michael Backes , Yun Shen , and Yang Zhang . 2022 . Inference Attacks Against Graph Neural Networks . In Proceedings of the 31st USENIX Security Symposium, USENIX Security 2022 , Boston, MA, USA, August 10--12 , 2022. USENIX Association, Berkeley, CA, USA. Zhikun Zhang, Min Chen, Michael Backes, Yun Shen, and Yang Zhang. 2022. Inference Attacks Against Graph Neural Networks. In Proceedings of the 31st USENIX Security Symposium, USENIX Security 2022, Boston, MA, USA, August 10--12, 2022. USENIX Association, Berkeley, CA, USA."}],"event":{"name":"CCS '22: 2022 ACM SIGSAC Conference on Computer and Communications Security","location":"Los Angeles CA USA","acronym":"CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 15th ACM Workshop on Artificial Intelligence and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3560830.3563734","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3560830.3563734","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T19:00:34Z","timestamp":1750186834000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3560830.3563734"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,7]]},"references-count":32,"alternative-id":["10.1145\/3560830.3563734","10.1145\/3560830"],"URL":"https:\/\/doi.org\/10.1145\/3560830.3563734","relation":{},"subject":[],"published":{"date-parts":[[2022,11,7]]},"assertion":[{"value":"2022-11-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}