{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,16]],"date-time":"2026-09-16T08:29:25Z","timestamp":1789547365098,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":46,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,10,26]],"date-time":"2023-10-26T00:00:00Z","timestamp":1698278400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"the National Natural Science Foundation of China","award":["U21B2024,62202329"],"award-info":[{"award-number":["U21B2024,62202329"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,10,26]]},"DOI":"10.1145\/3581783.3612396","type":"proceedings-article","created":{"date-parts":[[2023,10,27]],"date-time":"2023-10-27T07:26:54Z","timestamp":1698391614000},"page":"6705-6714","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["My Brother Helps Me: Node Injection Based Adversarial Attack on Social Bot Detection"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7696-5330","authenticated-orcid":false,"given":"Lanjun","family":"Wang","sequence":"first","affiliation":[{"name":"Tianjin University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-9246-9756","authenticated-orcid":false,"given":"Xinran","family":"Qiao","sequence":"additional","affiliation":[{"name":"Tianjin University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-9141-8907","authenticated-orcid":false,"given":"Yanwei","family":"Xie","sequence":"additional","affiliation":[{"name":"Tianjin University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9183-5721","authenticated-orcid":false,"given":"Weizhi","family":"Nie","sequence":"additional","affiliation":[{"name":"Tianjin University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1151-1792","authenticated-orcid":false,"given":"Yongdong","family":"Zhang","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5755-9145","authenticated-orcid":false,"given":"Anan","family":"Liu","sequence":"additional","affiliation":[{"name":"Tianjin University, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,10,27]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Jonathon M Berger and Jonathon Morgan. 2015. The ISIS Twitter Census: Defining and describing the population of ISIS supporters on Twitter. (2015)."},{"key":"e_1_3_2_1_2_1","first-page":"695","article-title":"Adversarial Attacks on Node Embeddings via Graph Poisoning","volume":"97","author":"Bojchevski Aleksandar","year":"2019","unstructured":"Aleksandar Bojchevski and Stephan G\u00fcnnemann. 2019. Adversarial Attacks on Node Embeddings via Graph Poisoning. In ICML, Vol. 97. 695--704.","journal-title":"ICML"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","unstructured":"Chiyu Cai Linjing Li and Daniel Zeng. 2017. Detecting Social Bots by Jointly Modeling Deep Behavior and Content Information. In CIKM. 1995--1998.","DOI":"10.1145\/3132847.3133050"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"crossref","unstructured":"Qi Cao Huawei Shen Jinhua Gao Bingzheng Wei and Xueqi Cheng. 2020. Popularity Prediction on Social Platforms with Coupled Graph Neural Networks. In WSDM. 70--78.","DOI":"10.1145\/3336191.3371834"},{"key":"e_1_3_2_1_5_1","volume-title":"Scalable Whitebox Attacks on Tree-based Models. CoRR","author":"Castiglione Giuseppe","year":"2022","unstructured":"Giuseppe Castiglione, Gavin Ding, Masoud Hashemi, Christopher Srinivasa, and Ga Wu. 2022. Scalable Whitebox Attacks on Tree-based Models. CoRR (2022)."},{"key":"e_1_3_2_1_6_1","volume-title":"A Survey of Adversarial Learning on Graphs. CoRR","author":"Chen Liang","year":"2020","unstructured":"Liang Chen, Jintang Li, Jiaying Peng, Tao Xie, Zengxu Cao, Kun Xu, Xiangnan He, and Zibin Zheng. 2020. A Survey of Adversarial Learning on Graphs. CoRR (2020)."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Weilong Chen Chenghao Huang Weimin Yuan Xiaolu Chen Wenhao Hu Xinran Zhang and Yanru Zhang. 2022. Title-and-Tag Contrastive Vision-and-Language Transformer for Social Media Popularity Prediction. In ACM MM. 7008--7012.","DOI":"10.1145\/3503161.3551568"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2015.09.003"},{"key":"e_1_3_2_1_9_1","volume-title":"ICML","volume":"80","author":"Dai Hanjun","year":"2018","unstructured":"Hanjun Dai, Hui Li, Tian Tian, Xin Huang, Lin Wang, Jun Zhu, and Le Song. 2018. Adversarial Attack on Graph Structured Data. In ICML, Vol. 80. 1123--1132."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"crossref","unstructured":"Ashok Deb Luca Luceri Adam Badawy and Emilio Ferrara. 2019. Perils and Challenges of Social Media and Election Manipulation Analysis: The 2018 US Midterms. In WWW. 237--247.","DOI":"10.1145\/3308560.3316486"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"crossref","unstructured":"Ashkan Dehghan Kinga Siuta Agata Skorupka Akshat Dubey Andrei Betlen David Miller Wei Xu Bogumil Kaminski and Pawel Pralat. 2022. Detecting Bots in Social-networks using Node and Structural Embeddings. In DATA. 50--61.","DOI":"10.5220\/0011147300003269"},{"key":"e_1_3_2_1_12_1","volume-title":"TwiBot-22: Towards Graph-Based Twitter Bot Detection. CoRR","author":"Feng Shangbin","year":"2022","unstructured":"Shangbin Feng, Zhaoxuan Tan, Herun Wan, Ningnan Wang, Zilong Chen, Binchi Zhang, Qinghua Zheng, Wenqian Zhang, Zhenyu Lei, Shujie Yang, Xinshun Feng, Qingyue Zhang, Hongrui Wang, Yuhan Liu, Yuyang Bai, Heng Wang, Zijian Cai, Yanbo Wang, Lijing Zheng, Zihan Ma, Jundong Li, and Minnan Luo. 2022. TwiBot-22: Towards Graph-Based Twitter Bot Detection. CoRR (2022)."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3459637.3481949"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"Shangbin Feng Herun Wan Ningnan Wang and Minnan Luo. 2021a. BotRGCN: Twitter bot detection with relational graph convolutional networks. In ASONAM. 236--239.","DOI":"10.1145\/3487351.3488336"},{"key":"e_1_3_2_1_15_1","volume-title":"First Monday","volume":"22","author":"Ferrara Emilio","year":"2017","unstructured":"Emilio Ferrara. 2017. Disinformation and social bot operations in the run up to the 2017 French presidential election. First Monday, Vol. 22, 8 (2017)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5210\/fm.v25i6.10633"},{"key":"e_1_3_2_1_17_1","volume-title":"HyperAttack: Multi-Gradient-Guided White-box Adversarial Structure Attack of Hypergraph Neural Networks. CoRR","author":"Hu Chao","year":"2023","unstructured":"Chao Hu, Ruishi Yu, Binqi Zeng, Yu Zhan, Ying Fu, Quan Zhang, Rongkai Liu, and Heyuan Shi. 2023. HyperAttack: Multi-Gradient-Guided White-box Adversarial Structure Attack of Hypergraph Neural Networks. CoRR (2023)."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Ziniu Hu Yuxiao Dong Kuansan Wang and Yizhou Sun. 2020. Heterogeneous Graph Transformer. In WWW. 2704--2710.","DOI":"10.1145\/3366423.3380027"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"crossref","unstructured":"Jinyuan Jia Binghui Wang Xiaoyu Cao and Neil Zhenqiang Gong. 2020. Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing. In WWW. 2718--2724.","DOI":"10.1145\/3366423.3380029"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.3390\/technologies8040064"},{"key":"e_1_3_2_1_21_1","volume-title":"Political astroturfing on Twitter: How to coordinate a disinformation campaign. Political communication","author":"Keller Franziska B","year":"2020","unstructured":"Franziska B Keller, David Schoch, Sebastian Stier, and JungHwan Yang. 2020. Political astroturfing on Twitter: How to coordinate a disinformation campaign. Political communication, Vol. 37, 2 (2020), 256--280."},{"key":"e_1_3_2_1_22_1","volume-title":"Kipf and Max Welling","author":"Thomas","year":"2017","unstructured":"Thomas N. Kipf and Max Welling. 2017. Semi-Supervised Classification with Graph Convolutional Networks. In ICLR."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"crossref","unstructured":"J\u00fcrgen Knauth. 2019. Language-Agnostic Twitter-Bot Detection. In RANLP. 550--558.","DOI":"10.26615\/978-954-452-056-4_065"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2018.08.019"},{"key":"e_1_3_2_1_25_1","volume-title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach. CoRR","author":"Liu Yinhan","year":"2019","unstructured":"Yinhan Liu, Myle Ott, Naman Goyal, Jingfei Du, Mandar Joshi, Danqi Chen, Omer Levy, Mike Lewis, Luke Zettlemoyer, and Veselin Stoyanov. 2019. RoBERTa: A Robustly Optimized BERT Pretraining Approach. CoRR (2019)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"crossref","unstructured":"Qingsong Lv Ming Ding Qiang Liu Yuxiang Chen Wenzheng Feng Siming He Chang Zhou Jianguo Jiang Yuxiao Dong and Jie Tang. 2021. Are we really making much progress?: Revisiting benchmarking and refining heterogeneous graph neural networks. In KDD. 1150--1160.","DOI":"10.1145\/3447548.3467350"},{"key":"e_1_3_2_1_27_1","unstructured":"Jiaqi Ma Shuangrui Ding and Qiaozhu Mei. 2020. Towards More Practical Adversarial Attacks on Graph Neural Networks. In NeurIPS."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"crossref","unstructured":"Yao Ma Suhang Wang Tyler Derr Lingfei Wu and Jiliang Tang. 2021. Graph Adversarial Attack via Rewiring. In KDD. 1161--1169.","DOI":"10.1145\/3447548.3467416"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.is.2021.101771"},{"key":"e_1_3_2_1_30_1","first-page":"5448","article-title":"A Persistent Weisfeiler-Lehman Procedure for Graph Classification","volume":"97","author":"Rieck Bastian","year":"2019","unstructured":"Bastian Rieck, Christian Bock, and Karsten M. Borgwardt. 2019. A Persistent Weisfeiler-Lehman Procedure for Graph Classification. In ICML, Vol. 97. 5448--5458.","journal-title":"ICML"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"Jitao Sang Xian Zhao Jiaming Zhang and Zhiyu Lin. 2022. Benign Adversarial Attack: Tricking Models for Goodness. In ACM MM. 6883--6889.","DOI":"10.1145\/3503161.3549200"},{"key":"e_1_3_2_1_32_1","first-page":"593","article-title":"Modeling Relational Data with Graph Convolutional Networks","volume":"10843","author":"Schlichtkrull Michael Sejr","year":"2018","unstructured":"Michael Sejr Schlichtkrull, Thomas N. Kipf, Peter Bloem, Rianne van den Berg, Ivan Titov, and Max Welling. 2018. Modeling Relational Data with Graph Convolutional Networks. In ESWC, Vol. 10843. 593--607.","journal-title":"ESWC"},{"key":"e_1_3_2_1_33_1","volume-title":"Honavar","author":"Sun Yiwei","year":"2020","unstructured":"Yiwei Sun, Suhang Wang, Xianfeng Tang, Tsung-Yu Hsieh, and Vasant G. Honavar. 2020. Adversarial Attacks on Graph Neural Networks via Node Injections: A Hierarchical Reinforcement Learning Approach. In WWW. 673--683."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"crossref","unstructured":"Yunpeng Tan Fangyu Liu Bowei Li Zheng Zhang and Bo Zhang. 2022. An Efficient Multi-View Multimodal Data Processing Framework for Social Media Popularity Prediction. In ACM MM. 7200--7204.","DOI":"10.1145\/3503161.3551607"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"crossref","unstructured":"Shuchang Tao Qi Cao Huawei Shen Junjie Huang Yunfan Wu and Xueqi Cheng. 2021. Single Node Injection Attack against Graph Neural Networks. In CIKM. 1794--1803.","DOI":"10.1145\/3459637.3482393"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"crossref","unstructured":"M Buug ra Torusdaug Mucahid Kutlu and Ali Aydin Selcc uk. 2020. Are we secure from bots? Investigating vulnerabilities of botometer. In UBMK. 343--348.","DOI":"10.1109\/UBMK50275.2020.9219433"},{"key":"e_1_3_2_1_37_1","volume-title":"Kankanhalli","author":"von der Weth Christian","year":"2020","unstructured":"Christian von der Weth, Ashraf M. Abdul, Shaojing Fan, and Mohan S. Kankanhalli. 2020. Helping Users Tackle Algorithmic Threats on Social Media: A Multimedia Research Agenda. In ACM MM. 4425--4434."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"crossref","unstructured":"Lina Wang Kang Yang Wenqi Wang Run Wang and Aoshuang Ye. 2020. MGA Attack: Toward More Query-efficient Black-box Attack by Microbial Genetic Algorithm. In ACM MM. 2229--2236.","DOI":"10.1145\/3394171.3413703"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"crossref","unstructured":"Bingbing Xu Huawei Shen Qi Cao Keting Cen and Xueqi Cheng. 2019b. Graph Convolutional Networks using Heat Kernel for Semi-supervised Learning. In IJCAI. 1928--1934.","DOI":"10.24963\/ijcai.2019\/267"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-019-1211-x"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"crossref","unstructured":"Kaidi Xu Hongge Chen Sijia Liu Pin-Yu Chen Tsui-Wei Weng Mingyi Hong and Xue Lin. 2019a. Topology Attack and Defense for Graph Neural Networks: An Optimization Perspective. In IJCAI. 3961--3967.","DOI":"10.24963\/ijcai.2019\/550"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"crossref","unstructured":"Qiuling Xu Guanhong Tao Siyuan Cheng and Xiangyu Zhang. 2021. Towards Feature Space Adversarial Attack by Style Perturbation. In AAAI. 10523--10531.","DOI":"10.1609\/aaai.v35i12.17259"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"crossref","unstructured":"Xing Xu Jiefu Chen Jinhui Xiao Zheng Wang Yang Yang and Heng Tao Shen. 2020a. Learning Optimization-based Adversarial Perturbations for Attacking Sequential Recognition Models. In ACM MM. 2802--2822.","DOI":"10.1145\/3394171.3413543"},{"key":"e_1_3_2_1_44_1","volume-title":"Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness. CoRR","author":"Yang Xiao","year":"2021","unstructured":"Xiao Yang, Yinpeng Dong, Wenzhao Xiang, Tianyu Pang, Hang Su, and Jun Zhu. 2021. Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness. CoRR (2021)."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"crossref","unstructured":"Zheng Yuan Jie Zhang Yunpei Jia Chuanqi Tan Tao Xue and Shiguang Shan. 2021. Meta Gradient Adversarial Attack. In ICCV. 7728--7737.","DOI":"10.1109\/ICCV48922.2021.00765"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"crossref","unstructured":"Daniel Z\u00fcgner Amir Akbarnejad and Stephan G\u00fcnnemann. 2019. Adversarial Attacks on Neural Networks for Graph Data. In IJCAI. 6246--6250.","DOI":"10.24963\/ijcai.2019\/872"}],"event":{"name":"MM '23: The 31st ACM International Conference on Multimedia","location":"Ottawa ON Canada","acronym":"MM '23","sponsor":["SIGMM ACM Special Interest Group on Multimedia"]},"container-title":["Proceedings of the 31st ACM International Conference on Multimedia"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3581783.3612396","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3581783.3612396","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T00:04:41Z","timestamp":1755821081000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3581783.3612396"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,26]]},"references-count":46,"alternative-id":["10.1145\/3581783.3612396","10.1145\/3581783"],"URL":"https:\/\/doi.org\/10.1145\/3581783.3612396","relation":{},"subject":[],"published":{"date-parts":[[2023,10,26]]},"assertion":[{"value":"2023-10-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}