{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T22:25:00Z","timestamp":1791325500537,"version":"4.3.1"},"publisher-location":"New York, NY, USA","reference-count":47,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,5,13]],"date-time":"2024-05-13T00:00:00Z","timestamp":1715558400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,5,13]]},"DOI":"10.1145\/3589334.3645489","type":"proceedings-article","created":{"date-parts":[[2024,5,8]],"date-time":"2024-05-08T07:08:13Z","timestamp":1715152093000},"page":"652-663","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["GNNFingers: A Fingerprinting Framework for Verifying Ownerships of Graph Neural Networks"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1980-9868","authenticated-orcid":false,"given":"Xiaoyu","family":"You","sequence":"first","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9619-8039","authenticated-orcid":false,"given":"Youhe","family":"Jiang","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0394-6953","authenticated-orcid":false,"given":"Jianwei","family":"Xu","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3567-3478","authenticated-orcid":false,"given":"Mi","family":"Zhang","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9714-5545","authenticated-orcid":false,"given":"Min","family":"Yang","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,5,13]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"S. Abu-El-Haija B. Perozzi R. Al-Rfou and A. Alemi. 2017. Watch Your Step: Learning Node Embeddings via Graph Attention. (2017)."},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3289600.3290967"},{"key":"e_1_3_2_2_3_1","volume-title":"Dual Student Networks for Data-Free Model Stealing. arXiv preprint arXiv:2309.10058","author":"Beetham James","year":"2023","unstructured":"James Beetham, Navid Kardan, Ajmal Mian, and Mubarak Shah. 2023. Dual Student Networks for Data-Free Model Stealing. arXiv preprint arXiv:2309.10058 (2023)."},{"key":"e_1_3_2_2_4_1","volume-title":"Protein function prediction via graph kernels. Bioinformatics suppl_1","author":"Borgwardt K. M.","year":"2005","unstructured":"K. M. Borgwardt, O. C. Soon, S. Stefan, Svn Vishwanathan, A. J. Smola, and Kriegel Hans-Peter. 2005. Protein function prediction via graph kernels. Bioinformatics suppl_1 (2005), i47."},{"key":"e_1_3_2_2_5_1","unstructured":"X. Cao J. Jia and N. Z. Gong. 2019. IPGuard: Protecting the Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary. (2019)."},{"key":"e_1_3_2_2_6_1","volume-title":"Adversarial model extraction on graph neural networks. arXiv preprint arXiv:1912.07721","author":"DeFazio David","year":"2019","unstructured":"David DeFazio and Arti Ramesh. 2019. Adversarial model extraction on graph neural networks. arXiv preprint arXiv:1912.07721 (2019)."},{"key":"e_1_3_2_2_7_1","volume-title":"Graph-free knowledge distillation for graph neural networks. arXiv preprint arXiv:2105.07519","author":"Deng Xiang","year":"2021","unstructured":"Xiang Deng and Zhongfei Zhang. 2021. Graph-free knowledge distillation for graph neural networks. arXiv preprint arXiv:2105.07519 (2021)."},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0022-2836(03)00628-4"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-021-01453-z"},{"key":"e_1_3_2_2_10_1","volume-title":"Inductive representation learning on large graphs. NeuralPS 30","author":"Hamilton Will","year":"2017","unstructured":"Will Hamilton, Zhitao Ying, and Jure Leskovec. 2017. Inductive representation learning on large graphs. NeuralPS 30 (2017)."},{"key":"e_1_3_2_2_11_1","volume-title":"Learnable graph convolutional attention networks. arXiv preprint arXiv:2211.11853","author":"Javaloy Adri\u00e1n","year":"2022","unstructured":"Adri\u00e1n Javaloy, Pablo Sanchez-Martin, Amit Levi, and Isabel Valera. 2022. Learnable graph convolutional attention networks. arXiv preprint arXiv:2211.11853 (2022)."},{"key":"e_1_3_2_2_12_1","volume-title":"Multi-task self-supervised graph neural networks enable stronger task generalization. arXiv preprint arXiv:2210.02016","author":"Ju Mingxuan","year":"2022","unstructured":"Mingxuan Ju, Tong Zhao, QianlongWen,Wenhao Yu, Neil Shah, Yanfang Ye, and Chuxu Zhang. 2022. Multi-task self-supervised graph neural networks enable stronger task generalization. arXiv preprint arXiv:2210.02016 (2022)."},{"key":"e_1_3_2_2_13_1","unstructured":"T. N. Kipf and M. Welling. 2016. Semi-Supervised Classification with Graph Convolutional Networks."},{"key":"e_1_3_2_2_14_1","volume-title":"Pruning filters for efficient convnets. arXiv preprint arXiv:1608.08710","author":"Li Hao","year":"2016","unstructured":"Hao Li, Asim Kadav, Igor Durdanovic, Hanan Samet, and Hans Peter Graf. 2016. Pruning filters for efficient convnets. arXiv preprint arXiv:1608.08710 (2016)."},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"crossref","unstructured":"Q. Li Z. Han and X. M. Wu. 2018. Deeper Insights into Graph Convolutional Networks for Semi-Supervised Learning. (2018).","DOI":"10.1609\/aaai.v32i1.11604"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2021.07.051"},{"key":"e_1_3_2_2_17_1","volume-title":"A pac-bayesian approach to generalization bounds for graph neural networks. arXiv preprint arXiv:2012.07690","author":"Liao Renjie","year":"2020","unstructured":"Renjie Liao, Raquel Urtasun, and Richard Zemel. 2020. A pac-bayesian approach to generalization bounds for graph neural networks. arXiv preprint arXiv:2012.07690 (2020)."},{"key":"e_1_3_2_2_18_1","volume-title":"Spectral augmentation for self-supervised learning on graphs. arXiv preprint arXiv:2210.00643","author":"Lin Lu","year":"2022","unstructured":"Lu Lin, Jinghui Chen, and Hongning Wang. 2022. Spectral augmentation for self-supervised learning on graphs. arXiv preprint arXiv:2210.00643 (2022)."},{"key":"e_1_3_2_2_19_1","unstructured":"Hanwen Liu Zhenyu Weng and Yuesheng Zhu. 2021. Watermarking Deep Neural Networks with Greedy Residuals. In ICML."},{"key":"e_1_3_2_2_20_1","volume-title":"Hyperbolic graph neural networks. Advances in Neural Information Processing Systems 32","author":"Liu Qi","year":"2019","unstructured":"Qi Liu, Maximilian Nickel, and Douwe Kiela. 2019. Hyperbolic graph neural networks. Advances in Neural Information Processing Systems 32 (2019)."},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330982"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"e_1_3_2_2_23_1","volume-title":"Adversarially regularized graph autoencoder for graph embedding. IJCAI","author":"Pan Shirui","year":"2018","unstructured":"Shirui Pan, Ruiqi Hu, Guodong Long, Jing Jiang, Lina Yao, and Chengqi Zhang. 2018. Adversarially regularized graph autoencoder for graph embedding. IJCAI (2018)."},{"key":"e_1_3_2_2_24_1","unstructured":"Xudong Pan Yifan Yan Mi Zhang and Min Yang. 2022. MetaV: A Meta-Verifier Approach to Task-Agnostic Model Fingerprinting."},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833743"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3338498.3358646"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01485"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"crossref","unstructured":"Yun Shen Xinlei He Yufei Han and Yang Zhang. 2022. Model stealing attacks against inductive graph neural networks. In S & P.","DOI":"10.1109\/SP46214.2022.9833607"},{"key":"e_1_3_2_2_29_1","unstructured":"Florian Tram\u00e8r Fan Zhang Ari Juels Michael K Reiter and Thomas Ristenpart. 2016. Stealing machine learning models via prediction {APIs}. In USENIX."},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00474"},{"key":"e_1_3_2_2_31_1","volume-title":"Graph attention networks. arXiv preprint arXiv:1710.10903","author":"Velickovic Petar","year":"2017","unstructured":"Petar Velickovic, Guillem Cucurull, Arantxa Casanova, Adriana Romero, Pietro Lio, and Yoshua Bengio. 2017. Graph attention networks. arXiv preprint arXiv:1710.10903 (2017)."},{"key":"e_1_3_2_2_32_1","volume-title":"Integrity Fingerprinting of DNN with Double Black-box Design and Verification. arXiv preprint arXiv:2203.10902","author":"Wang Shuo","year":"2022","unstructured":"Shuo Wang, Sidharth Agarwal, Sharif Abuadbba, Kristen Moore, Surya Nepal, and Salil Kanhere. 2022. Integrity Fingerprinting of DNN with Double Black-box Design and Verification. arXiv preprint arXiv:2203.10902 (2022)."},{"key":"e_1_3_2_2_33_1","volume-title":"International Symposium on Circuits and Systems.","author":"Wang S.","unstructured":"S. Wang and C. H. Chang. 2021. Fingerprinting Deep Neural Networks - a DeepFool Approach. In International Symposium on Circuits and Systems."},{"key":"e_1_3_2_2_34_1","volume-title":"Graph neural networks in anomaly detection. Graph Neural Networks: Foundations, Frontiers, and Applications","author":"Wang Shen","year":"2022","unstructured":"Shen Wang and Philip S Yu. 2022. Graph neural networks in anomaly detection. Graph Neural Networks: Foundations, Frontiers, and Applications (2022), 557--578."},{"key":"e_1_3_2_2_35_1","volume-title":"Shanshan Ying, and Hai Jin.","author":"Wang Xiaoli","year":"2012","unstructured":"Xiaoli Wang, Xiaofeng Ding, Anthony KH Tung, Shanshan Ying, and Hai Jin. 2012. An efficient graph indexing method. In ICDE."},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"crossref","unstructured":"Bang Wu Xiangwen Yang Shirui Pan and Xingliang Yuan. 2022. Model Extraction Attacks on Graph Neural Networks: Taxonomy and Realisation. In AsiaCCS. 337--350.","DOI":"10.1145\/3488932.3497753"},{"key":"e_1_3_2_2_37_1","volume-title":"Watermarking Graph Neural Networks based on Backdoor Attacks. arXiv preprint arXiv:2110.11024","author":"Xu Jing","year":"2021","unstructured":"Jing Xu and Stjepan Picek. 2021. Watermarking Graph Neural Networks based on Backdoor Attacks. arXiv preprint arXiv:2110.11024 (2021)."},{"key":"e_1_3_2_2_38_1","volume-title":"How powerful are graph neural networks? arXiv preprint arXiv:1810.00826","author":"Xu Keyulu","year":"2018","unstructured":"Keyulu Xu,Weihua Hu, Jure Leskovec, and Stefanie Jegelka. 2018. How powerful are graph neural networks? arXiv preprint arXiv:1810.00826 (2018)."},{"key":"e_1_3_2_2_39_1","unstructured":"Kang Yang Run Wang and Lina Wang. [n. d.]. MetaFinger: Fingerprinting the Deep Neural Networks with Meta-training. ([n. d.])."},{"key":"e_1_3_2_2_40_1","unstructured":"R. Ying J. You C. Morris X. Ren William L Hamilton and J. Leskovec. 2018. Hierarchical Graph Representation Learning with Differentiable Pooling."},{"key":"e_1_3_2_2_41_1","volume-title":"Link Prediction Based on Graph Neural Networks. ArXiv abs\/1802.09691","author":"Zhang Muhan","year":"2018","unstructured":"Muhan Zhang and Yixin Chen. 2018. Link Prediction Based on Graph Neural Networks. ArXiv abs\/1802.09691 (2018)."},{"key":"e_1_3_2_2_42_1","volume-title":"Graph neural networks and their current applications in bioinformatics. Frontiers in genetics 12","author":"Zhang Xiao-Meng","year":"2021","unstructured":"Xiao-Meng Zhang, Li Liang, Lin Liu, and Ming-Jing Tang. 2021. Graph neural networks and their current applications in bioinformatics. Frontiers in genetics 12 (2021)."},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3450569.3463560"},{"key":"e_1_3_2_2_44_1","volume-title":"Graphmi: Extracting private graph data from graph neural networks. arXiv preprint arXiv:2106.02820","author":"Zhang Zaixi","year":"2021","unstructured":"Zaixi Zhang, Qi Liu, Zhenya Huang, Hao Wang, Chengqiang Lu, Chuanren Liu, and Enhong Chen. 2021. Graphmi: Extracting private graph data from graph neural networks. arXiv preprint arXiv:2106.02820 (2021)."},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS52919.2021.9486352"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01478"},{"key":"e_1_3_2_2_47_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Zhu Yuankun","year":"2021","unstructured":"Yuankun Zhu, Yueqiang Cheng, Husheng Zhou, and Yantao Lu. 2021. Hermes attack: Steal {DNN} models with lossless inference accuracy. In 30th USENIX Security Symposium (USENIX Security 21)."}],"event":{"name":"WWW '24: The ACM Web Conference 2024","location":"Singapore Singapore","acronym":"WWW '24","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM Web Conference 2024"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589334.3645489","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3589334.3645489","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T00:24:56Z","timestamp":1755822296000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589334.3645489"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5,13]]},"references-count":47,"alternative-id":["10.1145\/3589334.3645489","10.1145\/3589334"],"URL":"https:\/\/doi.org\/10.1145\/3589334.3645489","relation":{},"subject":[],"published":{"date-parts":[[2024,5,13]]},"assertion":[{"value":"2024-05-13","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}