{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,7]],"date-time":"2026-06-07T07:25:25Z","timestamp":1780817125064,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":73,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,7,20]],"date-time":"2025-07-20T00:00:00Z","timestamp":1752969600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Department of Homeland Security (DHS)","award":["E205949D"],"award-info":[{"award-number":["E205949D"]}]},{"name":"Cisco Faculty Research Award"},{"name":"Army Research Office (ARO)","award":["W911NF-21-1- 0198"],"award-info":[{"award-number":["W911NF-21-1- 0198"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,7,20]]},"DOI":"10.1145\/3690624.3709289","type":"proceedings-article","created":{"date-parts":[[2025,4,4]],"date-time":"2025-04-04T18:42:22Z","timestamp":1743792142000},"page":"777-788","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Stealing Training Graphs from Graph Neural Networks"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1591-7172","authenticated-orcid":false,"given":"Minhua","family":"Lin","sequence":"first","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9715-0280","authenticated-orcid":false,"given":"Enyan","family":"Dai","sequence":"additional","affiliation":[{"name":"Hong Kong University of Science and Technology (Guangzhou), Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3673-786X","authenticated-orcid":false,"given":"Junjie","family":"Xu","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9785-7769","authenticated-orcid":false,"given":"Jinyuan","family":"Jia","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0940-6595","authenticated-orcid":false,"given":"Xiang","family":"Zhang","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3448-4878","authenticated-orcid":false,"given":"Suhang","family":"Wang","sequence":"additional","affiliation":[{"name":"The Pennsylvania State University, University Park, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,7,20]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Yogesh Balaji Seungjun Nah Xun Huang Arash Vahdat Jiaming Song Karsten Kreis Miika Aittala Timo Aila Samuli Laine Bryan Catanzaro et al. 2022. ediffi: Text-to-image diffusion models with an ensemble of expert denoisers. arXiv preprint arXiv:2211.01324 (2022)."},{"key":"e_1_3_2_1_2_1","volume-title":"On the importance of noise scheduling for diffusion models. arXiv preprint arXiv:2301.10972","author":"Chen Ting","year":"2023","unstructured":"Ting Chen. 2023. On the importance of noise scheduling for diffusion models. arXiv preprint arXiv:2301.10972 (2023)."},{"key":"e_1_3_2_1_3_1","volume-title":"Graph-augmented normalizing flows for anomaly detection of multiple time series. arXiv preprint arXiv:2202.07857","author":"Dai Enyan","year":"2022","unstructured":"Enyan Dai and Jie Chen. 2022. Graph-augmented normalizing flows for anomaly detection of multiple time series. arXiv preprint arXiv:2202.07857 (2022)."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"crossref","unstructured":"Enyan Dai Limeng Cui Zhengyang Wang Xianfeng Tang Yinghan Wang Monica Cheng Bing Yin and Suhang Wang. 2023a. A unified framework of graph information bottleneck for robustness and membership privacy. In SIGKDD. 368--379.","DOI":"10.1145\/3580305.3599248"},{"key":"e_1_3_2_1_5_1","volume-title":"PreGIP: Watermarking the Pretraining of Graph Neural Networks for Deep Intellectual Property Protection. arXiv preprint arXiv:2402.04435","author":"Dai Enyan","year":"2024","unstructured":"Enyan Dai, Minhua Lin, and Suhang Wang. 2024. PreGIP: Watermarking the Pretraining of Graph Neural Networks for Deep Intellectual Property Protection. arXiv preprint arXiv:2402.04435 (2024)."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"Enyan Dai Minhua Lin Xiang Zhang and Suhang Wang. 2023b. Unnoticeable backdoor attacks on graph neural networks. In WWW. 2263--2273.","DOI":"10.1145\/3543507.3583392"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Enyan Dai and Suhang Wang. 2021a. Say no to the discrimination: Learning fair graph neural networks with limited sensitive attribute information. In WSDM. 680--688.","DOI":"10.1145\/3437963.3441752"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"crossref","unstructured":"Enyan Dai and Suhang Wang. 2021b. Towards self-explainable graph neural network. In CIKM. 302--311.","DOI":"10.1145\/3459637.3482306"},{"key":"e_1_3_2_1_9_1","first-page":"7103","article-title":"Learning fair graph neural networks with limited and private sensitive attribute information","volume":"35","author":"Dai Enyan","year":"2022","unstructured":"Enyan Dai and Suhang Wang. 2022a. Learning fair graph neural networks with limited and private sensitive attribute information. TKDE, Vol. 35, 7 (2022), 7103--7117.","journal-title":"TKDE"},{"key":"e_1_3_2_1_10_1","volume-title":"Towards prototype-based self-explainable graph neural network. TKDD","author":"Dai Enyan","year":"2022","unstructured":"Enyan Dai and Suhang Wang. 2022b. Towards prototype-based self-explainable graph neural network. TKDD (2022)."},{"key":"e_1_3_2_1_11_1","volume-title":"A comprehensive survey on trustworthy graph neural networks: Privacy, robustness, fairness, and explainability. arXiv preprint arXiv:2204.08570","author":"Dai Enyan","year":"2022","unstructured":"Enyan Dai, Tianxiang Zhao, Huaisheng Zhu, Junjie Xu, Zhimeng Guo, Hui Liu, Jiliang Tang, and Suhang Wang. 2022. A comprehensive survey on trustworthy graph neural networks: Privacy, robustness, fairness, and explainability. arXiv preprint arXiv:2204.08570 (2022)."},{"key":"e_1_3_2_1_12_1","volume-title":"Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805","author":"Devlin Jacob","year":"2018","unstructured":"Jacob Devlin, Ming-Wei Chang, Kenton Lee, and Kristina Toutanova. 2018. Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805 (2018)."},{"key":"e_1_3_2_1_13_1","unstructured":"Alexey Dosovitskiy Lucas Beyer Alexander Kolesnikov Dirk Weissenborn Xiaohua Zhai Thomas Unterthiner Mostafa Dehghani Matthias Minderer Georg Heigold Sylvain Gelly et al. 2020. An image is worth 16x16 words: Transformers for image recognition at scale. arXiv preprint arXiv:2010.11929 (2020)."},{"key":"e_1_3_2_1_14_1","unstructured":"Simon Shaolei Du Wei Hu Sham M Kakade Jason D Lee and Qi Lei. 2020. Few-Shot Learning via Learning the Representation Provably. In ICLR."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","unstructured":"Vasisht Duddu Antoine Boutet and Virat Shejwalkar. 2020. Quantifying privacy leakage in graph embedding. In MobiQuitous. 76--85.","DOI":"10.1145\/3448891.3448939"},{"key":"e_1_3_2_1_16_1","volume-title":"AAAI Workshop on Deep Learning on Graphs: Methods and Applications","author":"Dwivedi Vijay Prakash","year":"2021","unstructured":"Vijay Prakash Dwivedi and Xavier Bresson. 2021. A Generalization of Transformer Networks to Graphs. AAAI Workshop on Deep Learning on Graphs: Methods and Applications (2021)."},{"key":"e_1_3_2_1_17_1","unstructured":"Federico Errica Marco Podda Davide Bacciu and Alessio Micheli. 2019. A Fair Comparison of Graph Neural Networks for Graph Classification. In ICLR."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Wenqi Fan Yao Ma Qing Li Yuan He Eric Zhao Jiliang Tang and Dawei Yin. 2019. Graph neural networks for social recommendation. In WWW. 417--426.","DOI":"10.1145\/3308558.3313488"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"crossref","unstructured":"Xiang Fang Wanlong Fang Daizong Liu Xiaoye Qu Jianfeng Dong Pan Zhou Renfu Li Zichuan Xu Lixing Chen Panpan Zheng et al. 2024. Not all inputs are valid: Towards open-set video moment retrieval using language. In ACM MM.","DOI":"10.1145\/3664647.3680947"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"crossref","unstructured":"Xiang Fang Daizong Liu Wanlong Fang Pan Zhou Yu Cheng Keke Tang and Kai Zou. 2023. Annotations Are Not All You Need: A Cross-modal Knowledge Transfer Network for Unsupervised Temporal Sentence Grounding. In Findings of EMNLP.","DOI":"10.18653\/v1\/2023.findings-emnlp.583"},{"key":"e_1_3_2_1_21_1","volume-title":"Chemnet: A deep neural network for advanced composites manufacturing. The Journal of Physical Chemistry B","author":"Goli Elyas","year":"2020","unstructured":"Elyas Goli, Sagar Vyas, Seid Koric, Nahil Sobh, and Philippe H Geubelle. 2020. Chemnet: A deep neural network for advanced composites manufacturing. The Journal of Physical Chemistry B (2020), 9428--9437."},{"key":"e_1_3_2_1_22_1","volume-title":"NeurIPS","volume":"30","author":"Hamilton Will","year":"2017","unstructured":"Will Hamilton, Zhitao Ying, and Jure Leskovec. 2017. Inductive representation learning on large graphs. NeurIPS, Vol. 30 (2017)."},{"key":"e_1_3_2_1_23_1","volume-title":"Neil Zhenqiang Gong, and Yang Zhang","author":"He Xinlei","year":"2021","unstructured":"Xinlei He, Jinyuan Jia, Michael Backes, Neil Zhenqiang Gong, and Yang Zhang. 2021a. Stealing links from graph neural networks. In USENIX. 2669--2686."},{"key":"e_1_3_2_1_24_1","volume-title":"Node-level membership inference attacks against graph neural networks. arXiv preprint arXiv:2102.05429","author":"He Xinlei","year":"2021","unstructured":"Xinlei He, Rui Wen, Yixin Wu, Michael Backes, Yun Shen, and Yang Zhang. 2021b. Node-level membership inference attacks against graph neural networks. arXiv preprint arXiv:2102.05429 (2021)."},{"key":"e_1_3_2_1_25_1","volume-title":"NeurIPS","volume":"30","author":"Heusel Martin","year":"2017","unstructured":"Martin Heusel, Hubert Ramsauer, Thomas Unterthiner, Bernhard Nessler, and Sepp Hochreiter. 2017. Gans trained by a two time-scale update rule converge to a local nash equilibrium. NeurIPS, Vol. 30 (2017)."},{"key":"e_1_3_2_1_26_1","unstructured":"Jonathan Ho William Chan Chitwan Saharia Jay Whang Ruiqi Gao Alexey Gritsenko Diederik P Kingma Ben Poole Mohammad Norouzi David J Fleet et al. 2022. Imagen video: High definition video generation with diffusion models. arXiv preprint arXiv:2210.02303 (2022)."},{"key":"e_1_3_2_1_27_1","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume":"33","author":"Ho Jonathan","year":"2020","unstructured":"Jonathan Ho, Ajay Jain, and Pieter Abbeel. 2020. Denoising diffusion probabilistic models. NeurIPS, Vol. 33 (2020), 6840--6851.","journal-title":"NeurIPS"},{"key":"e_1_3_2_1_28_1","volume-title":"Cl\u00e9ment Vignac, and Max Welling.","author":"Hoogeboom Emiel","year":"2022","unstructured":"Emiel Hoogeboom, Victor Garcia Satorras, Cl\u00e9ment Vignac, and Max Welling. 2022. Equivariant diffusion for molecule generation in 3d. In ICML. 8867--8887."},{"key":"e_1_3_2_1_29_1","unstructured":"Zhichao Hou Minhua Lin MohamadAli Torkamani Suhang Wang and Xiaorui Liu. 2024. Adversarial Robustness in Graph Neural Networks: Recent Advances and New Frontier. In DSAA."},{"key":"e_1_3_2_1_30_1","volume-title":"Amit Levi, and Isabel Valera.","author":"Javaloy Adri\u00e1n","year":"2023","unstructured":"Adri\u00e1n Javaloy, Pablo Sanchez Martin, Amit Levi, and Isabel Valera. 2023. Learnable Graph Convolutional Attention Networks. In ICLR."},{"key":"e_1_3_2_1_31_1","first-page":"17176","article-title":"Directional convergence and alignment in deep learning","volume":"33","author":"Ji Ziwei","year":"2020","unstructured":"Ziwei Ji and Matus Telgarsky. 2020. Directional convergence and alignment in deep learning. NeurIPS, Vol. 33 (2020), 17176--17186.","journal-title":"NeurIPS"},{"key":"e_1_3_2_1_32_1","unstructured":"Jaehyeong Jo Seul Lee and Sung Ju Hwang. 2022. Score-based generative modeling of graphs via the system of stochastic differential equations. In ICML. 10362--10383."},{"key":"e_1_3_2_1_33_1","volume-title":"Kipf and Max Welling","author":"Thomas","year":"2017","unstructured":"Thomas N. Kipf and Max Welling. 2017. Semi-Supervised Classification with Graph Convolutional Networks. In ICLR."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i11.29138"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.media.2021.102233"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1089\/big.2020.0070"},{"key":"e_1_3_2_1_37_1","volume-title":"Decoding Time Series with LLMs: A Multi-Agent Framework for Cross-Domain Annotation. arXiv preprint arXiv:2410.17462","author":"Lin Minhua","year":"2024","unstructured":"Minhua Lin, Zhengzhang Chen, Yanchi Liu, Xujiang Zhao, Zongyu Wu, Junxiang Wang, Xiang Zhang, Suhang Wang, and Haifeng Chen. 2024a. Decoding Time Series with LLMs: A Multi-Agent Framework for Cross-Domain Annotation. arXiv preprint arXiv:2410.17462 (2024)."},{"key":"e_1_3_2_1_38_1","volume-title":"NeurIPS","volume":"36","author":"Lin Minhua","year":"2024","unstructured":"Minhua Lin, Teng Xiao, Enyan Dai, Xiang Zhang, and Suhang Wang. 2024b. Certifiably robust graph contrastive learning. NeurIPS, Vol. 36 (2024)."},{"key":"e_1_3_2_1_39_1","volume-title":"Trojan Prompt Attacks on Graph Neural Networks. arXiv preprint arXiv:2410.13974","author":"Lin Minhua","year":"2024","unstructured":"Minhua Lin, Zhiwei Zhang, Enyan Dai, Zongyu Wu, Yilong Wang, Xiang Zhang, and Suhang Wang. 2024c. Trojan Prompt Attacks on Graph Neural Networks. arXiv preprint arXiv:2410.13974 (2024)."},{"key":"e_1_3_2_1_40_1","unstructured":"Yi Liu Limei Wang Meng Liu Yuchao Lin Xuan Zhang Bora Oztekin and Shuiwang Ji. 2022. Spherical message passing for 3d molecular graphs. In ICLR."},{"key":"e_1_3_2_1_41_1","volume-title":"Fast graph generation via spectral diffusion. TPAMI","author":"Luo Tianze","year":"2023","unstructured":"Tianze Luo, Zhanfeng Mo, and Sinno Jialin Pan. 2023. Fast graph generation via spectral diffusion. TPAMI (2023)."},{"key":"e_1_3_2_1_42_1","unstructured":"Kaifeng Lyu and Jian Li. 2020. Gradient Descent Maximizes the Margin of Homogeneous Neural Networks. In ICLR."},{"key":"e_1_3_2_1_43_1","unstructured":"Chenlin Meng Yutong He Yang Song Jiaming Song Jiajun Wu Jun-Yan Zhu and Stefano Ermon. 2022. SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equations. In ICLR."},{"key":"e_1_3_2_1_44_1","volume-title":"Attending to graph transformers. arXiv preprint arXiv:2302.04181","author":"M\u00fcller Luis","year":"2023","unstructured":"Luis M\u00fcller, Mikhail Galkin, Christopher Morris, and Ladislav Ramp\u00e1\u0161ek. 2023. Attending to graph transformers. arXiv preprint arXiv:2302.04181 (2023)."},{"key":"e_1_3_2_1_45_1","unstructured":"Mor Shpigel Nacson Suriya Gunasekar Jason Lee Nathan Srebro and Daniel Soudry. [n. d.]. Lexicographic and depth-sensitive margins in homogeneous and non-homogeneous deep models. In ICML."},{"key":"e_1_3_2_1_46_1","volume-title":"Membership inference attack on graph neural networks","author":"Olatunji Iyiola E","unstructured":"Iyiola E Olatunji, Wolfgang Nejdl, and Megha Khosla. 2021. Membership inference attack on graph neural networks. In TPS-ISA. IEEE, 11--20."},{"key":"e_1_3_2_1_47_1","first-page":"1736","article-title":"Fr\u00e9chet ChemNet Distance: A Metric for Generative Models for Molecules in Drug Discovery","volume":"58","author":"Preuer Kristina","year":"2018","unstructured":"Kristina Preuer, Philipp Renz, Thomas Unterthiner, Sepp Hochreiter, and G\u00fcnter Klambauer. 2018. Fr\u00e9chet ChemNet Distance: A Metric for Generative Models for Molecules in Drug Discovery. JCIM, Vol. 58, 9 (2018), 1736--1741.","journal-title":"JCIM"},{"key":"e_1_3_2_1_48_1","volume-title":"Hierarchical text-conditional image generation with clip latents. arXiv preprint arXiv:2204.06125","author":"Ramesh Aditya","year":"2022","unstructured":"Aditya Ramesh, Prafulla Dhariwal, Alex Nichol, Casey Chu, and Mark Chen. 2022. Hierarchical text-conditional image generation with clip latents. arXiv preprint arXiv:2204.06125, Vol. 1, 2 (2022), 3."},{"key":"e_1_3_2_1_49_1","first-page":"14501","article-title":"Recipe for a general, powerful, scalable graph transformer","volume":"35","author":"Ramp\u00e1\u0161ek Ladislav","year":"2022","unstructured":"Ladislav Ramp\u00e1\u0161ek, Michael Galkin, Vijay Prakash Dwivedi, Anh Tuan Luu, Guy Wolf, and Dominique Beaini. 2022. Recipe for a general, powerful, scalable graph transformer. NeurIPS, Vol. 35 (2022), 14501--14515.","journal-title":"NeurIPS"},{"key":"e_1_3_2_1_50_1","unstructured":"Yang Song Jascha Sohl-Dickstein Diederik P Kingma Abhishek Kumar Stefano Ermon and Ben Poole. 2021. Score-Based Generative Modeling through Stochastic Differential Equations. In ICLR. https:\/\/openreview.net\/forum?id=PxTIG12RRHS"},{"key":"e_1_3_2_1_51_1","first-page":"64","article-title":"Markov processes over denumerable products of spaces, describing large systems of automata","volume":"5","author":"Vaserstein Leonid Nisonovich","year":"1969","unstructured":"Leonid Nisonovich Vaserstein. 1969. Markov processes over denumerable products of spaces, describing large systems of automata. Problemy Peredachi Informatsii, Vol. 5, 3 (1969), 64--72.","journal-title":"Problemy Peredachi Informatsii"},{"key":"e_1_3_2_1_52_1","unstructured":"Clement Vignac Igor Krawczuk Antoine Siraudin Bohan Wang Volkan Cevher and Pascal Frossard. 2023. DiGress: Discrete Denoising diffusion for graph generation. In ICLR."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"crossref","unstructured":"Binghui Wang Minhua Lin Tianxiang Zhou Pan Zhou Ang Li Meng Pang Hai Li and Yiran Chen. 2024. Efficient direct and restricted black-box graph evasion attacks to any-layer graph neural networks via influence function. In WSDM. 693--701.","DOI":"10.1145\/3616855.3635826"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"crossref","unstructured":"Daixin Wang Jianbin Lin Peng Cui Quanhui Jia Zhen Wang Yanming Fang Quan Yu Jun Zhou Shuang Yang and Yuan Qi. 2019. A Semi-supervised Graph Attentive Network for Financial Fraud Detection. In ICDM. 598--607.","DOI":"10.1109\/ICDM.2019.00070"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-022-00447-x"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"crossref","unstructured":"Bang Wu Xiangwen Yang Shirui Pan and Xingliang Yuan. 2022. Model extraction attacks on graph neural networks: Taxonomy and realisation. In AsiaCCS. 337--350.","DOI":"10.1145\/3488932.3497753"},{"key":"e_1_3_2_1_57_1","unstructured":"Felix Wu Amauri Souza Tianyi Zhang Christopher Fifty Tao Yu and Kilian Weinberger. 2019. Simplifying graph convolutional networks. In ICML. 6861--6871."},{"key":"e_1_3_2_1_58_1","volume-title":"Neil Zhenqiang Gong, and Yang Zhang","author":"Wu Yixin","year":"2024","unstructured":"Yixin Wu, Xinlei He, Pascal Berrang, Mathias Humbert, Michael Backes, Neil Zhenqiang Gong, and Yang Zhang. 2024. Link Stealing Attacks Against Inductive Graph Neural Networks. arXiv preprint arXiv:2405.05784 (2024)."},{"key":"e_1_3_2_1_59_1","volume-title":"MoleculeNet: a benchmark for molecular machine learning. Chemical science","author":"Wu Zhenqin","year":"2018","unstructured":"Zhenqin Wu, Bharath Ramsundar, Evan N Feinberg, Joseph Gomes, Caleb Geniesse, Aneesh S Pappu, Karl Leswing, and Vijay Pande. 2018. MoleculeNet: a benchmark for molecular machine learning. Chemical science, Vol. 9, 2 (2018), 513--530."},{"key":"e_1_3_2_1_60_1","volume-title":"LLM and GNN are Complementary: Distilling LLM for Multimodal Graph Learning. arXiv preprint arXiv:2406.01032","author":"Xu Junjie","year":"2024","unstructured":"Junjie Xu, Zongyu Wu, Minhua Lin, Xiang Zhang, and Suhang Wang. 2024. LLM and GNN are Complementary: Distilling LLM for Multimodal Graph Learning. arXiv preprint arXiv:2406.01032 (2024)."},{"key":"e_1_3_2_1_61_1","unstructured":"Keyulu Xu Weihua Hu Jure Leskovec and Stefanie Jegelka. 2018. How Powerful are Graph Neural Networks?. In ICLR."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"crossref","unstructured":"Minkai Xu Meng Liu Wengong Jin Shuiwang Ji Jure Leskovec and Stefano Ermon. 2023. Graph and geometry generative modeling for drug discovery. In SIGKDD. 5833--5834.","DOI":"10.1145\/3580305.3599559"},{"key":"e_1_3_2_1_63_1","volume-title":"Geodiff: A geometric diffusion model for molecular conformation generation. arXiv preprint arXiv:2203.02923","author":"Xu Minkai","year":"2022","unstructured":"Minkai Xu, Lantao Yu, Yang Song, Chence Shi, Stefano Ermon, and Jian Tang. 2022. Geodiff: A geometric diffusion model for molecular conformation generation. arXiv preprint arXiv:2203.02923 (2022)."},{"key":"e_1_3_2_1_64_1","volume-title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability. In Thirty-seventh Conference on Neural Information Processing Systems.","author":"Xue Haotian","year":"2023","unstructured":"Haotian Xue, Alexandre Araujo, Bin Hu, and Yongxin Chen. 2023. Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability. In Thirty-seventh Conference on Neural Information Processing Systems."},{"key":"e_1_3_2_1_65_1","first-page":"28877","article-title":"Do transformers really perform badly for graph representation","volume":"34","author":"Ying Chengxuan","year":"2021","unstructured":"Chengxuan Ying, Tianle Cai, Shengjie Luo, Shuxin Zheng, Guolin Ke, Di He, Yanming Shen, and Tie-Yan Liu. 2021. Do transformers really perform badly for graph representation? NeurIPS, Vol. 34 (2021), 28877--28888.","journal-title":"NeurIPS"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"crossref","unstructured":"Rex Ying Ruining He Kaifeng Chen Pong Eksombatchai William L Hamilton and Jure Leskovec. 2018. Graph convolutional neural networks for web-scale recommender systems. In SIGKDD. 974--983.","DOI":"10.1145\/3219819.3219890"},{"key":"e_1_3_2_1_67_1","volume-title":"Xgnn: Towards model-level explanations of graph neural networks. In SIGKDD. 430--438.","author":"Yuan Hao","year":"2020","unstructured":"Hao Yuan, Jiliang Tang, Xia Hu, and Shuiwang Ji. 2020. Xgnn: Towards model-level explanations of graph neural networks. In SIGKDD. 430--438."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3446776"},{"key":"e_1_3_2_1_69_1","volume-title":"Graph-bert: Only attention is needed for learning graph representations. arXiv preprint arXiv:2001.05140","author":"Zhang Jiawei","year":"2020","unstructured":"Jiawei Zhang, Haopeng Zhang, Congying Xia, and Li Sun. 2020. Graph-bert: Only attention is needed for learning graph representations. arXiv preprint arXiv:2001.05140 (2020)."},{"key":"e_1_3_2_1_70_1","unstructured":"Zhikun Zhang Min Chen Michael Backes Yun Shen and Yang Zhang. 2022. Inference attacks against graph neural networks. In USENIX. 4543--4560."},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"crossref","unstructured":"Zhiwei Zhang Minhua Lin Enyan Dai and Suhang Wang. 2024a. Rethinking graph backdoor attacks: A distribution-preserving perspective. In SIGKDD. 4386--4397.","DOI":"10.1145\/3637528.3671910"},{"key":"e_1_3_2_1_72_1","volume-title":"Robustness-Inspired Defense Against Backdoor Attacks on Graph Neural Networks. arXiv preprint arXiv:2406.09836","author":"Zhang Zhiwei","year":"2024","unstructured":"Zhiwei Zhang, Minhua Lin, Junjie Xu, Zongyu Wu, Enyan Dai, and Suhang Wang. 2024b. Robustness-Inspired Defense Against Backdoor Attacks on Graph Neural Networks. arXiv preprint arXiv:2406.09836 (2024)."},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"crossref","unstructured":"Zaixi Zhang Qi Liu Zhenya Huang Hao Wang Chengqiang Lu Chuanren Liu and Enhong Chen. 2021b. GraphMI: Extracting Private Graph Data from Graph Neural Networks. In IJCAI. 3749--3755.","DOI":"10.24963\/ijcai.2021\/516"}],"event":{"name":"KDD '25: The 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining","location":"Toronto ON Canada","acronym":"KDD '25","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"]},"container-title":["Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.1"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3690624.3709289","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3690624.3709289","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,16]],"date-time":"2025-08-16T15:38:46Z","timestamp":1755358726000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3690624.3709289"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7,20]]},"references-count":73,"alternative-id":["10.1145\/3690624.3709289","10.1145\/3690624"],"URL":"https:\/\/doi.org\/10.1145\/3690624.3709289","relation":{},"subject":[],"published":{"date-parts":[[2025,7,20]]},"assertion":[{"value":"2025-07-20","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}