{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,17]],"date-time":"2026-02-17T03:39:18Z","timestamp":1771299558004,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":57,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,8,4]],"date-time":"2023-08-04T00:00:00Z","timestamp":1691107200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["IIS-1909702"],"award-info":[{"award-number":["IIS-1909702"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["W911NF21-1-0198"],"award-info":[{"award-number":["W911NF21-1-0198"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,8,6]]},"DOI":"10.1145\/3580305.3599248","type":"proceedings-article","created":{"date-parts":[[2023,8,4]],"date-time":"2023-08-04T18:10:58Z","timestamp":1691172658000},"page":"368-379","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["A Unified Framework of Graph Information Bottleneck for Robustness and Membership Privacy"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9715-0280","authenticated-orcid":false,"given":"Enyan","family":"Dai","sequence":"first","affiliation":[{"name":"Pennsylvania State University, State College, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5222-3690","authenticated-orcid":false,"given":"Limeng","family":"Cui","sequence":"additional","affiliation":[{"name":"Amazon, Palo Alto, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5146-2884","authenticated-orcid":false,"given":"Zhengyang","family":"Wang","sequence":"additional","affiliation":[{"name":"Amazon, Palo Alto, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1554-2761","authenticated-orcid":false,"given":"Xianfeng","family":"Tang","sequence":"additional","affiliation":[{"name":"Amazon, Palo Alto, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-5335-549X","authenticated-orcid":false,"given":"Yinghan","family":"Wang","sequence":"additional","affiliation":[{"name":"Amazon, Palo Alto, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1140-687X","authenticated-orcid":false,"given":"Monica","family":"Cheng","sequence":"additional","affiliation":[{"name":"Amazon, Palo Alto, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5890-0031","authenticated-orcid":false,"given":"Bing","family":"Yin","sequence":"additional","affiliation":[{"name":"Amazon, Palo Alto, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3448-4878","authenticated-orcid":false,"given":"Suhang","family":"Wang","sequence":"additional","affiliation":[{"name":"Pennsylvania State University, State College, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,8,4]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"crossref","unstructured":"Martin Abadi Andy Chu Ian Goodfellow H Brendan McMahan Ilya Mironov Kunal Talwar and Li Zhang. 2016. Deep learning with differential privacy. In CCS. 308--318. Martin Abadi Andy Chu Ian Goodfellow H Brendan McMahan Ilya Mironov Kunal Talwar and Li Zhang. 2016. Deep learning with differential privacy. In CCS. 308--318.","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_3_2_2_2_1","volume-title":"Deep variational information bottleneck. arXiv preprint arXiv:1612.00410","author":"Alemi Alexander A","year":"2016","unstructured":"Alexander A Alemi , Ian Fischer , Joshua V Dillon , and Kevin Murphy . 2016. Deep variational information bottleneck. arXiv preprint arXiv:1612.00410 ( 2016 ). Alexander A Alemi, Ian Fischer, Joshua V Dillon, and Kevin Murphy. 2016. Deep variational information bottleneck. arXiv preprint arXiv:1612.00410 (2016)."},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2021.04.039"},{"key":"e_1_3_2_2_4_1","volume-title":"JMLR","volume":"12","author":"Chaudhuri Kamalika","year":"2011","unstructured":"Kamalika Chaudhuri , Claire Monteleoni , and Anand D Sarwate . 2011 . Differentially private empirical risk minimization . JMLR , Vol. 12 , 3 (2011). Kamalika Chaudhuri, Claire Monteleoni, and Anand D Sarwate. 2011. Differentially private empirical risk minimization. JMLR, Vol. 12, 3 (2011)."},{"key":"e_1_3_2_2_5_1","volume-title":"Understanding structural vulnerability in graph convolutional networks. arXiv preprint arXiv:2108.06280","author":"Chen Liang","year":"2021","unstructured":"Liang Chen , Jintang Li , Qibiao Peng , Yang Liu , Zibin Zheng , and Carl Yang . 2021. Understanding structural vulnerability in graph convolutional networks. arXiv preprint arXiv:2108.06280 ( 2021 ). Liang Chen, Jintang Li, Qibiao Peng, Yang Liu, Zibin Zheng, and Carl Yang. 2021. Understanding structural vulnerability in graph convolutional networks. arXiv preprint arXiv:2108.06280 (2021)."},{"key":"e_1_3_2_2_6_1","volume-title":"ICML. PMLR","author":"Choquette-Choo Christopher A","year":"2021","unstructured":"Christopher A Choquette-Choo , Florian Tramer , Nicholas Carlini , and Nicolas Papernot . 2021 . Label-only membership inference attacks . In ICML. PMLR , 1964--1974. Christopher A Choquette-Choo, Florian Tramer, Nicholas Carlini, and Nicolas Papernot. 2021. Label-only membership inference attacks. In ICML. PMLR, 1964--1974."},{"key":"e_1_3_2_2_7_1","volume-title":"NRGNN: Learning a Label Noise-Resistant Graph Neural Network on Sparsely and Noisily Labeled Graphs. arXiv preprint arXiv:2106.04714","author":"Dai Enyan","year":"2021","unstructured":"Enyan Dai , Charu Aggarwal , and Suhang Wang . 2021 . NRGNN: Learning a Label Noise-Resistant Graph Neural Network on Sparsely and Noisily Labeled Graphs. arXiv preprint arXiv:2106.04714 (2021). Enyan Dai, Charu Aggarwal, and Suhang Wang. 2021. NRGNN: Learning a Label Noise-Resistant Graph Neural Network on Sparsely and Noisily Labeled Graphs. arXiv preprint arXiv:2106.04714 (2021)."},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"crossref","unstructured":"Enyan Dai Wei Jin Hui Liu and Suhang Wang. 2022a. Towards robust graph neural networks for noisy graphs with sparse labels. In WSDM. 181--191. Enyan Dai Wei Jin Hui Liu and Suhang Wang. 2022a. Towards robust graph neural networks for noisy graphs with sparse labels. In WSDM. 181--191.","DOI":"10.1145\/3488560.3498408"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"crossref","unstructured":"Enyan Dai Minhua Lin Xiang Zhang and Suhang Wang. 2023. Unnoticeable Backdoor Attacks on Graph Neural Networks. In WWW. 2263--2273. Enyan Dai Minhua Lin Xiang Zhang and Suhang Wang. 2023. Unnoticeable Backdoor Attacks on Graph Neural Networks. In WWW. 2263--2273.","DOI":"10.1145\/3543507.3583392"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"crossref","unstructured":"Enyan Dai and Suhang Wang. 2021a. Say No to the Discrimination: Learning Fair Graph Neural Networks with Limited Sensitive Attribute Information. In WSDM. 680--688. Enyan Dai and Suhang Wang. 2021a. Say No to the Discrimination: Learning Fair Graph Neural Networks with Limited Sensitive Attribute Information. In WSDM. 680--688.","DOI":"10.1145\/3437963.3441752"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3459637.3482306"},{"key":"e_1_3_2_2_12_1","volume-title":"Robustness, Fairness, and Explainability. arXiv preprint arXiv:2204.08570","author":"Dai Enyan","year":"2022","unstructured":"Enyan Dai , Tianxiang Zhao , Huaisheng Zhu , Junjie Xu , Zhimeng Guo , Hui Liu , Jiliang Tang , and Suhang Wang . 2022b. A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy , Robustness, Fairness, and Explainability. arXiv preprint arXiv:2204.08570 ( 2022 ). Enyan Dai, Tianxiang Zhao, Huaisheng Zhu, Junjie Xu, Zhimeng Guo, Hui Liu, Jiliang Tang, and Suhang Wang. 2022b. A Comprehensive Survey on Trustworthy Graph Neural Networks: Privacy, Robustness, Fairness, and Explainability. arXiv preprint arXiv:2204.08570 (2022)."},{"key":"e_1_3_2_2_13_1","volume-title":"Label-Wise Graph Convolutional Network for Heterophilic Graphs. In Learning on Graphs Conference. https:\/\/openreview.net\/forum?id=HRmby7yVVuF","author":"Dai Enyan","year":"2022","unstructured":"Enyan Dai , Shijie Zhou , Zhimeng Guo , and Suhang Wang . 2022 c. Label-Wise Graph Convolutional Network for Heterophilic Graphs. In Learning on Graphs Conference. https:\/\/openreview.net\/forum?id=HRmby7yVVuF Enyan Dai, Shijie Zhou, Zhimeng Guo, and Suhang Wang. 2022c. Label-Wise Graph Convolutional Network for Heterophilic Graphs. In Learning on Graphs Conference. https:\/\/openreview.net\/forum?id=HRmby7yVVuF"},{"key":"e_1_3_2_2_14_1","volume-title":"Adversarial attack on graph structured data. ICML","author":"Dai Hanjun","year":"2018","unstructured":"Hanjun Dai , Hui Li , Tian Tian , Xin Huang , Lin Wang , Jun Zhu , and Le Song . 2018. Adversarial attack on graph structured data. ICML ( 2018 ). Hanjun Dai, Hui Li, Tian Tian, Xin Huang, Lin Wang, Jun Zhu, and Le Song. 2018. Adversarial attack on graph structured data. ICML (2018)."},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"crossref","unstructured":"Negin Entezari Saba A Al-Sayouri Amirali Darvishzadeh and Evangelos E Papalexakis. 2020. All You Need Is Low (Rank) Defending Against Adversarial Attacks on Graphs. In WSDM. 169--177. Negin Entezari Saba A Al-Sayouri Amirali Darvishzadeh and Evangelos E Papalexakis. 2020. All You Need Is Low (Rank) Defending Against Adversarial Attacks on Graphs. In WSDM. 169--177.","DOI":"10.1145\/3336191.3371789"},{"key":"e_1_3_2_2_16_1","first-page":"7637","article-title":"Robustness of graph neural networks at scale","volume":"34","author":"Geisler Simon","year":"2021","unstructured":"Simon Geisler , Tobias Schmidt , Hakan cS irin, Daniel Z\u00fcgner , Aleksandar Bojchevski , and Stephan G\u00fcnnemann . 2021 . Robustness of graph neural networks at scale . NeurIPS , Vol. 34 (2021), 7637 -- 7649 . Simon Geisler, Tobias Schmidt, Hakan cS irin, Daniel Z\u00fcgner, Aleksandar Bojchevski, and Stephan G\u00fcnnemann. 2021. Robustness of graph neural networks at scale. NeurIPS , Vol. 34 (2021), 7637--7649.","journal-title":"NeurIPS"},{"key":"e_1_3_2_2_17_1","unstructured":"Will Hamilton Zhitao Ying and Jure Leskovec. 2017. Inductive representation learning on large graphs. In NeurIPS. 1024--1034. Will Hamilton Zhitao Ying and Jure Leskovec. 2017. Inductive representation learning on large graphs. In NeurIPS. 1024--1034."},{"key":"e_1_3_2_2_18_1","volume-title":"Logan: Membership inference attacks against generative models. arXiv preprint arXiv:1705.07663","author":"Hayes Jamie","year":"2017","unstructured":"Jamie Hayes , Luca Melis , George Danezis , and Emiliano De Cristofaro . 2017 . Logan: Membership inference attacks against generative models. arXiv preprint arXiv:1705.07663 (2017). Jamie Hayes, Luca Melis, George Danezis, and Emiliano De Cristofaro. 2017. Logan: Membership inference attacks against generative models. arXiv preprint arXiv:1705.07663 (2017)."},{"key":"e_1_3_2_2_19_1","volume-title":"Node-level membership inference attacks against graph neural networks. arXiv preprint arXiv:2102.05429","author":"He Xinlei","year":"2021","unstructured":"Xinlei He , Rui Wen , Yixin Wu , Michael Backes , Yun Shen , and Yang Zhang . 2021. Node-level membership inference attacks against graph neural networks. arXiv preprint arXiv:2102.05429 ( 2021 ). Xinlei He, Rui Wen, Yixin Wu, Michael Backes, Yun Shen, and Yang Zhang. 2021. Node-level membership inference attacks against graph neural networks. arXiv preprint arXiv:2102.05429 (2021)."},{"key":"e_1_3_2_2_20_1","volume-title":"Learning deep representations by mutual information estimation and maximization. arXiv preprint arXiv:1808.06670","author":"Hjelm R Devon","year":"2018","unstructured":"R Devon Hjelm , Alex Fedorov , Samuel Lavoie-Marchildon , Karan Grewal , Phil Bachman , Adam Trischler , and Yoshua Bengio . 2018. Learning deep representations by mutual information estimation and maximization. arXiv preprint arXiv:1808.06670 ( 2018 ). R Devon Hjelm, Alex Fedorov, Samuel Lavoie-Marchildon, Karan Grewal, Phil Bachman, Adam Trischler, and Yoshua Bengio. 2018. Learning deep representations by mutual information estimation and maximization. arXiv preprint arXiv:1808.06670 (2018)."},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1021\/ci3001277"},{"key":"e_1_3_2_2_22_1","volume-title":"Categorical reparameterization with gumbel-softmax. arXiv preprint arXiv:1611.01144","author":"Jang Eric","year":"2016","unstructured":"Eric Jang , Shixiang Gu , and Ben Poole . 2016. Categorical reparameterization with gumbel-softmax. arXiv preprint arXiv:1611.01144 ( 2016 ). Eric Jang, Shixiang Gu, and Ben Poole. 2016. Categorical reparameterization with gumbel-softmax. arXiv preprint arXiv:1611.01144 (2016)."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"crossref","unstructured":"Wei Jin Yao Ma Xiaorui Liu Xianfeng Tang Suhang Wang and Jiliang Tang. 2020. Graph structure learning for robust graph neural networks. In SIGKDD. 66--74. Wei Jin Yao Ma Xiaorui Liu Xianfeng Tang Suhang Wang and Jiliang Tang. 2020. Graph structure learning for robust graph neural networks. In SIGKDD. 66--74.","DOI":"10.1145\/3394486.3403049"},{"key":"e_1_3_2_2_24_1","first-page":"17148","article-title":"Distilling robust and non-robust features in adversarial examples by information bottleneck","volume":"34","author":"Kim Junho","year":"2021","unstructured":"Junho Kim , Byung-Kwan Lee , and Yong Man Ro . 2021 . Distilling robust and non-robust features in adversarial examples by information bottleneck . NeurIPS , Vol. 34 (2021), 17148 -- 17159 . Junho Kim, Byung-Kwan Lee, and Yong Man Ro. 2021. Distilling robust and non-robust features in adversarial examples by information bottleneck. NeurIPS, Vol. 34 (2021), 17148--17159.","journal-title":"NeurIPS"},{"key":"e_1_3_2_2_25_1","volume-title":"Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907","author":"Kipf Thomas N","year":"2016","unstructured":"Thomas N Kipf and Max Welling . 2016. Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907 ( 2016 ). Thomas N Kipf and Max Welling. 2016. Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907 (2016)."},{"key":"e_1_3_2_2_26_1","volume-title":"Workshop on challenges in representation learning, ICML","volume":"3","author":"Dong-Hyun","unstructured":"Dong-Hyun Lee et al. 2013. Pseudo-label: The simple and efficient semi-supervised learning method for deep neural networks . In Workshop on challenges in representation learning, ICML , Vol. 3 . 896. Dong-Hyun Lee et al. 2013. Pseudo-label: The simple and efficient semi-supervised learning method for deep neural networks. In Workshop on challenges in representation learning, ICML, Vol. 3. 896."},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"crossref","unstructured":"Kuan Li Yang Liu Xiang Ao Jianfeng Chi Jinghua Feng Hao Yang and Qing He. 2022. Reliable Representations Make A Stronger Defender: Unsupervised Structure Refinement for Robust GNN. In SIGKDD. 925--935. Kuan Li Yang Liu Xiang Ao Jianfeng Chi Jinghua Feng Hao Yang and Qing He. 2022. Reliable Representations Make A Stronger Defender: Unsupervised Structure Refinement for Robust GNN. In SIGKDD. 925--935.","DOI":"10.1145\/3534678.3539484"},{"key":"e_1_3_2_2_28_1","unstructured":"Xiaorui Liu Wei Jin Yao Ma Yaxin Li Hua Liu Yiqi Wang Ming Yan and Jiliang Tang. 2021. Elastic graph neural networks. In ICML. PMLR 6837--6849. Xiaorui Liu Wei Jin Yao Ma Yaxin Li Hua Liu Yiqi Wang Ming Yan and Jiliang Tang. 2021. Elastic graph neural networks. In ICML. PMLR 6837--6849."},{"key":"e_1_3_2_2_29_1","volume-title":"A weighted patient network-based framework for predicting chronic diseases using graph neural networks. Scientific reports","author":"Lu Haohui","year":"2021","unstructured":"Haohui Lu and Shahadat Uddin . 2021. A weighted patient network-based framework for predicting chronic diseases using graph neural networks. Scientific reports , Vol. 11 , 1 ( 2021 ), 22607. Haohui Lu and Shahadat Uddin. 2021. A weighted patient network-based framework for predicting chronic diseases using graph neural networks. Scientific reports, Vol. 11, 1 (2021), 22607."},{"key":"e_1_3_2_2_30_1","unstructured":"Siqi Miao Mia Liu and Pan Li. 2022. Interpretable and generalizable graph learning via stochastic attention mechanism. In ICML. PMLR 15524--15543. Siqi Miao Mia Liu and Pan Li. 2022. Interpretable and generalizable graph learning via stochastic attention mechanism. In ICML. PMLR 15524--15543."},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"crossref","unstructured":"Milad Nasr Reza Shokri and Amir Houmansadr. 2018. Machine learning with membership privacy using adversarial regularization. In CCS. 634--646. Milad Nasr Reza Shokri and Amir Houmansadr. 2018. Machine learning with membership privacy using adversarial regularization. In CCS. 634--646.","DOI":"10.1145\/3243734.3243855"},{"key":"e_1_3_2_2_32_1","volume-title":"Membership inference attack on graph neural networks","author":"Olatunji Iyiola E","unstructured":"Iyiola E Olatunji , Wolfgang Nejdl , and Megha Khosla . 2021. Membership inference attack on graph neural networks . In TPS-ISA. IEEE , 11--20. Iyiola E Olatunji, Wolfgang Nejdl, and Megha Khosla. 2021. Membership inference attack on graph neural networks. In TPS-ISA. IEEE, 11--20."},{"key":"e_1_3_2_2_33_1","volume-title":"Semi-supervised knowledge transfer for deep learning from private training data. arXiv preprint arXiv:1610.05755","author":"Papernot Nicolas","year":"2016","unstructured":"Nicolas Papernot , Mart\u00edn Abadi , Ulfar Erlingsson , Ian Goodfellow , and Kunal Talwar . 2016. Semi-supervised knowledge transfer for deep learning from private training data. arXiv preprint arXiv:1610.05755 ( 2016 ). Nicolas Papernot, Mart\u00edn Abadi, Ulfar Erlingsson, Ian Goodfellow, and Kunal Talwar. 2016. Semi-supervised knowledge transfer for deep learning from private training data. arXiv preprint arXiv:1610.05755 (2016)."},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403168"},{"key":"e_1_3_2_2_35_1","volume-title":"Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models. arXiv preprint arXiv:1806.01246","author":"Salem Ahmed","year":"2018","unstructured":"Ahmed Salem , Yang Zhang , Mathias Humbert , Pascal Berrang , Mario Fritz , and Michael Backes . 2018 . Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models. arXiv preprint arXiv:1806.01246 (2018). Ahmed Salem, Yang Zhang, Mathias Humbert, Pascal Berrang, Mario Fritz, and Michael Backes. 2018. Ml-leaks: Model and data independent membership inference attacks and defenses on machine learning models. arXiv preprint arXiv:1806.01246 (2018)."},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"crossref","unstructured":"Reza Shokri and Vitaly Shmatikov. 2015. Privacy-preserving deep learning. In CCS. 1310--1321. Reza Shokri and Vitaly Shmatikov. 2015. Privacy-preserving deep learning. In CCS. 1310--1321.","DOI":"10.1109\/ALLERTON.2015.7447103"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v36i4.20335"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"crossref","unstructured":"Xianfeng Tang Yandong Li Yiwei Sun Huaxiu Yao Prasenjit Mitra and Suhang Wang. 2020. Transferring Robustness for Graph Neural Network Against Poisoning Attacks. In WSDM. 600--608. Xianfeng Tang Yandong Li Yiwei Sun Huaxiu Yao Prasenjit Mitra and Suhang Wang. 2020. Transferring Robustness for Graph Neural Network Against Poisoning Attacks. In WSDM. 600--608.","DOI":"10.1145\/3336191.3371851"},{"key":"e_1_3_2_2_40_1","volume-title":"The information bottleneck method. arXiv preprint physics\/0004057","author":"Tishby Naftali","year":"2000","unstructured":"Naftali Tishby , Fernando C Pereira , and William Bialek . 2000. The information bottleneck method. arXiv preprint physics\/0004057 ( 2000 ). Naftali Tishby, Fernando C Pereira, and William Bialek. 2000. The information bottleneck method. arXiv preprint physics\/0004057 (2000)."},{"key":"e_1_3_2_2_41_1","volume-title":"Graph attention networks. ICLR","author":"Petar Velivc","year":"2018","unstructured":"Petar Velivc kovi\u0107, Guillem Cucurull , Arantxa Casanova , Adriana Romero , Pietro Lio , and Yoshua Bengio . 2018. Graph attention networks. ICLR ( 2018 ). Petar Velivc kovi\u0107, Guillem Cucurull, Arantxa Casanova, Adriana Romero, Pietro Lio, and Yoshua Bengio. 2018. Graph attention networks. ICLR (2018)."},{"key":"e_1_3_2_2_42_1","volume-title":"A Semi-supervised Graph Attentive Network for Financial Fraud Detection","author":"Wang Daixin","unstructured":"Daixin Wang , Jianbin Lin , Peng Cui , Quanhui Jia , Zhen Wang , Yanming Fang , Quan Yu , Jun Zhou , Shuang Yang , and Yuan Qi. 2019. A Semi-supervised Graph Attentive Network for Financial Fraud Detection . In ICDM. IEEE , 598--607. Daixin Wang, Jianbin Lin, Peng Cui, Quanhui Jia, Zhen Wang, Yanming Fang, Quan Yu, Jun Zhou, Shuang Yang, and Yuan Qi. 2019. A Semi-supervised Graph Attentive Network for Financial Fraud Detection. In ICDM. IEEE, 598--607."},{"key":"e_1_3_2_2_43_1","first-page":"586","article-title":"Revisiting Hilbert-Schmidt Information Bottleneck for Adversarial Robustness","volume":"34","author":"Wang Zifeng","year":"2021","unstructured":"Zifeng Wang , Tong Jian , Aria Masoomi , Stratis Ioannidis , and Jennifer Dy . 2021 . Revisiting Hilbert-Schmidt Information Bottleneck for Adversarial Robustness . NeurIPS , Vol. 34 (2021), 586 -- 597 . Zifeng Wang, Tong Jian, Aria Masoomi, Stratis Ioannidis, and Jennifer Dy. 2021. Revisiting Hilbert-Schmidt Information Bottleneck for Adversarial Robustness. NeurIPS, Vol. 34 (2021), 586--597.","journal-title":"NeurIPS"},{"key":"e_1_3_2_2_44_1","volume-title":"Adapting membership inference attacks to gnn for graph classification: Approaches and implications","author":"Wu Bang","unstructured":"Bang Wu , Xiangwen Yang , Shirui Pan , and Xingliang Yuan . 2021. Adapting membership inference attacks to gnn for graph classification: Approaches and implications . In ICDM. IEEE , 1421--1426. Bang Wu, Xiangwen Yang, Shirui Pan, and Xingliang Yuan. 2021. Adapting membership inference attacks to gnn for graph classification: Approaches and implications. In ICDM. IEEE, 1421--1426."},{"key":"e_1_3_2_2_45_1","unstructured":"Felix Wu Amauri Souza Tianyi Zhang Christopher Fifty Tao Yu and Kilian Weinberger. 2019a. Simplifying graph convolutional networks. In ICML. PMLR 6861--6871. Felix Wu Amauri Souza Tianyi Zhang Christopher Fifty Tao Yu and Kilian Weinberger. 2019a. Simplifying graph convolutional networks. In ICML. PMLR 6861--6871."},{"key":"e_1_3_2_2_46_1","volume-title":"Adversarial examples on graph data: Deep insights into attack and defense. arXiv preprint arXiv:1903.01610","author":"Wu Huijun","year":"2019","unstructured":"Huijun Wu , Chen Wang , Yuriy Tyshetskiy , Andrew Docherty , Kai Lu , and Liming Zhu . 2019b. Adversarial examples on graph data: Deep insights into attack and defense. arXiv preprint arXiv:1903.01610 ( 2019 ). Huijun Wu, Chen Wang, Yuriy Tyshetskiy, Andrew Docherty, Kai Lu, and Liming Zhu. 2019b. Adversarial examples on graph data: Deep insights into attack and defense. arXiv preprint arXiv:1903.01610 (2019)."},{"key":"e_1_3_2_2_47_1","first-page":"20437","article-title":"Graph information bottleneck","volume":"33","author":"Wu Tailin","year":"2020","unstructured":"Tailin Wu , Hongyu Ren , Pan Li , and Jure Leskovec . 2020 . Graph information bottleneck . NeurIPS , Vol. 33 (2020), 20437 -- 20448 . Tailin Wu, Hongyu Ren, Pan Li, and Jure Leskovec. 2020. Graph information bottleneck. NeurIPS, Vol. 33 (2020), 20437--20448.","journal-title":"NeurIPS"},{"key":"e_1_3_2_2_48_1","volume-title":"Topology attack and defense for graph neural networks: An optimization perspective. arXiv preprint arXiv:1906.04214","author":"Xu Kaidi","year":"2019","unstructured":"Kaidi Xu , Hongge Chen , Sijia Liu , Pin-Yu Chen , Tsui-Wei Weng , Mingyi Hong , and Xue Lin . 2019. Topology attack and defense for graph neural networks: An optimization perspective. arXiv preprint arXiv:1906.04214 ( 2019 ). Kaidi Xu, Hongge Chen, Sijia Liu, Pin-Yu Chen, Tsui-Wei Weng, Mingyi Hong, and Xue Lin. 2019. Topology attack and defense for graph neural networks: An optimization perspective. arXiv preprint arXiv:1906.04214 (2019)."},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"crossref","unstructured":"Rex Ying Ruining He Kaifeng Chen Pong Eksombatchai William L Hamilton and Jure Leskovec. 2018. Graph convolutional neural networks for web-scale recommender systems. In SIGKDD. 974--983. Rex Ying Ruining He Kaifeng Chen Pong Eksombatchai William L Hamilton and Jure Leskovec. 2018. Graph convolutional neural networks for web-scale recommender systems. In SIGKDD. 974--983.","DOI":"10.1145\/3219819.3219890"},{"key":"e_1_3_2_2_50_1","volume-title":"Graph information bottleneck for subgraph recognition. arXiv preprint arXiv:2010.05563","author":"Yu Junchi","year":"2020","unstructured":"Junchi Yu , Tingyang Xu , Yu Rong , Yatao Bian , Junzhou Huang , and Ran He. 2020. Graph information bottleneck for subgraph recognition. arXiv preprint arXiv:2010.05563 ( 2020 ). Junchi Yu, Tingyang Xu, Yu Rong, Yatao Bian, Junzhou Huang, and Ran He. 2020. Graph information bottleneck for subgraph recognition. arXiv preprint arXiv:2010.05563 (2020)."},{"key":"e_1_3_2_2_51_1","unstructured":"Hanqing Zeng Hongkuan Zhou Ajitesh Srivastava Rajgopal Kannan and Viktor Prasanna. 2020. GraphSAINT: Graph Sampling Based Inductive Learning Method. In ICLR. Hanqing Zeng Hongkuan Zhou Ajitesh Srivastava Rajgopal Kannan and Viktor Prasanna. 2020. GraphSAINT: Graph Sampling Based Inductive Learning Method. In ICLR."},{"key":"e_1_3_2_2_52_1","first-page":"9263","article-title":"GNNGuard: Defending Graph Neural Networks against Adversarial Attacks","volume":"33","author":"Zhang Xiang","year":"2020","unstructured":"Xiang Zhang and Marinka Zitnik . 2020 . GNNGuard: Defending Graph Neural Networks against Adversarial Attacks . In NeurIPS , Vol. 33. 9263 -- 9275 . Xiang Zhang and Marinka Zitnik. 2020. GNNGuard: Defending Graph Neural Networks against Adversarial Attacks. In NeurIPS, Vol. 33. 9263--9275.","journal-title":"NeurIPS"},{"key":"e_1_3_2_2_53_1","unstructured":"Tianxiang Zhao Xianfeng Tang Xiang Zhang and Suhang Wang. 2020. Semi-Supervised Graph-to-Graph Translation. In CIKM. 1863--1872. Tianxiang Zhao Xianfeng Tang Xiang Zhang and Suhang Wang. 2020. Semi-Supervised Graph-to-Graph Translation. In CIKM. 1863--1872."},{"key":"e_1_3_2_2_54_1","unstructured":"Dingyuan Zhu Ziwei Zhang Peng Cui and Wenwu Zhu. 2019. Robust graph convolutional networks against adversarial attacks. In SIGKDD. 1399--1407. Dingyuan Zhu Ziwei Zhang Peng Cui and Wenwu Zhu. 2019. Robust graph convolutional networks against adversarial attacks. In SIGKDD. 1399--1407."},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467314"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"crossref","unstructured":"Daniel Z\u00fcgner Amir Akbarnejad and Stephan G\u00fcnnemann. 2018. Adversarial attacks on neural networks for graph data. In SIGKDD. 2847--2856. Daniel Z\u00fcgner Amir Akbarnejad and Stephan G\u00fcnnemann. 2018. Adversarial attacks on neural networks for graph data. In SIGKDD. 2847--2856.","DOI":"10.1145\/3219819.3220078"},{"key":"e_1_3_2_2_57_1","doi-asserted-by":"crossref","unstructured":"Daniel Z\u00fcgner and Stephan G\u00fcnnemann. 2019. Adversarial Attacks on Graph Neural Networks via Meta Learning. In ICLR. Daniel Z\u00fcgner and Stephan G\u00fcnnemann. 2019. Adversarial Attacks on Graph Neural Networks via Meta Learning. In ICLR.","DOI":"10.24963\/ijcai.2019\/872"}],"event":{"name":"KDD '23: The 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","location":"Long Beach CA USA","acronym":"KDD '23","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"]},"container-title":["Proceedings of the 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3580305.3599248","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3580305.3599248","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3580305.3599248","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:51:15Z","timestamp":1750182675000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3580305.3599248"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,4]]},"references-count":57,"alternative-id":["10.1145\/3580305.3599248","10.1145\/3580305"],"URL":"https:\/\/doi.org\/10.1145\/3580305.3599248","relation":{},"subject":[],"published":{"date-parts":[[2023,8,4]]},"assertion":[{"value":"2023-08-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}