{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T08:19:12Z","timestamp":1783153152050,"version":"3.54.6"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","funder":[{"name":"National Natural Science Foundation of China","award":["62406307"],"award-info":[{"award-number":["62406307"]}]},{"name":"Strategic Priority Research Program of the Chinese Academy of Sciences","award":["XDB0680201"],"award-info":[{"award-number":["XDB0680201"]}]},{"name":"Postdoctoral Fellowship Program of CPSF","award":["GZB20240761"],"award-info":[{"award-number":["GZB20240761"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,13]]},"DOI":"10.1145\/3774904.3792507","type":"proceedings-article","created":{"date-parts":[[2026,4,9]],"date-time":"2026-04-09T21:54:39Z","timestamp":1775771679000},"page":"1229-1239","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["A\n                    <sup>2<\/sup>\n                    GBD: Attack-Agnostic Graph Backdoor Defense"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-7151-1056","authenticated-orcid":false,"given":"Chenxu","family":"Du","sequence":"first","affiliation":[{"name":"State Key Lab of AI Safety, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China and Southwest Jiaotong University, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1525-0788","authenticated-orcid":false,"given":"Yang","family":"Liu","sequence":"additional","affiliation":[{"name":"Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2884-8578","authenticated-orcid":false,"given":"Xingtong","family":"Yu","sequence":"additional","affiliation":[{"name":"The Chinese University of Hong Kong, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4250-7622","authenticated-orcid":false,"given":"Zhuoer","family":"Xu","sequence":"additional","affiliation":[{"name":"independent researcher, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3295-2917","authenticated-orcid":false,"given":"Yang","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Vehicle and Mobility, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7780-104X","authenticated-orcid":false,"given":"Tianrui","family":"Li","sequence":"additional","affiliation":[{"name":"Southwest Jiaotong University, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,4,12]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Leman Akoglu Hanghang Tong and Danai Koutra. 2014. Graph-based Anomaly Detection and Description: A Survey. arXiv:1404.4679 [cs.SI] https:\/\/arxiv.org\/abs\/1404.4679"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.2693418"},{"key":"e_1_3_2_1_3_1","volume-title":"Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526","author":"Chen Xinyun","year":"2017","unstructured":"Xinyun Chen, Chang Liu, Bo Li, Kimberly Lu, and Dawn Song. 2017. Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526 (2017)."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583392"},{"key":"e_1_3_2_1_5_1","volume-title":"A comprehensive survey on trustworthy graph neural networks: Privacy, robustness, fairness, and explainability. arXiv preprint arXiv:2204.08570","author":"Dai Enyan","year":"2022","unstructured":"Enyan Dai, Tianxiang Zhao, Huaisheng Zhu, Junjie Xu, Zhimeng Guo, Hui Liu, Jiliang Tang, and Suhang Wang. 2022. A comprehensive survey on trustworthy graph neural networks: Privacy, robustness, fairness, and explainability. arXiv preprint arXiv:2204.08570 (2022)."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3696410.3714665"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Wenqi Fan Yao Ma Qing Li Yuan He Eric Zhao Jiliang Tang and Dawei Yin. 2019. Graph neural networks for social recommendation. In The world wide web conference. 417-426.","DOI":"10.1145\/3308558.3313488"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3711896.3736992"},{"key":"e_1_3_2_1_10_1","volume-title":"Inductive representation learning on large graphs. Advances in neural information processing systems","author":"Hamilton Will","year":"2017","unstructured":"Will Hamilton, Zhitao Ying, and Jure Leskovec. 2017a. Inductive representation learning on large graphs. Advances in neural information processing systems, Vol. 30 (2017)."},{"key":"e_1_3_2_1_11_1","unstructured":"William L Hamilton Rex Ying and Jure Leskovec. 2017b. Inductive Representation Learning on Large Graphs. 1025-1035."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3397271.3401063"},{"key":"e_1_3_2_1_13_1","volume-title":"Bayesian Active Learning for Classification and Preference Learning. arXiv preprint arXiv:1112.5745","author":"Houlsby Neil","year":"2011","unstructured":"Neil Houlsby, Ferenc Husz\u00e1r, Zoubin Ghahramani, and Mark Lengyel. 2011. Bayesian Active Learning for Classification and Preference Learning. arXiv preprint arXiv:1112.5745 (2011)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP48485.2024.10446523"},{"key":"e_1_3_2_1_15_1","unstructured":"Ziniu Hu Yuxiao Dong Kuansan Wang and Yizhou Sun. 2020. Heterogeneous Graph Transformer. n\/a."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3512178"},{"key":"e_1_3_2_1_17_1","volume-title":"Defending against backdoor attack on graph nerual network by explainability. arXiv preprint arXiv:2209.02902","author":"Jiang Bingchen","year":"2022","unstructured":"Bingchen Jiang and Zhao Li. 2022. Defending against backdoor attack on graph nerual network by explainability. arXiv preprint arXiv:2209.02902 (2022)."},{"key":"e_1_3_2_1_18_1","volume-title":"LoSplit: Loss-Guided Dynamic Split for Training-Time Defense Against Graph Backdoor Attacks. In The Thirty-ninth Annual Conference on Neural Information Processing Systems.","author":"Jin Di","unstructured":"Di Jin, Yuxiang Zhang, Bingdao Feng, Xiaobao Wang, Dongxiao He, and Zhen Wang. [n.d.]. LoSplit: Loss-Guided Dynamic Split for Training-Time Defense Against Graph Backdoor Attacks. In The Thirty-ninth Annual Conference on Neural Information Processing Systems."},{"key":"e_1_3_2_1_19_1","volume-title":"Semi-Supervised Classification with Graph Convolutional Networks. In International Conference on Learning Representations (ICLR).","author":"Thomas","unstructured":"Thomas N. Kipf and Max Welling. 2017. Semi-Supervised Classification with Graph Convolutional Networks. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_20_1","volume-title":"The Twelfth International Conference on Learning Representations.","author":"Li Kuan","year":"2024","unstructured":"Kuan Li, YiWen Chen, Yang Liu, Jin Wang, Qing He, Minhao Cheng, and Xiang Ao. 2024. Boosting the adversarial robustness of graph neural networks: An ood perspective. In The Twelfth International Conference on Learning Representations."},{"key":"e_1_3_2_1_21_1","volume-title":"The Eleventh International Conference on Learning Representations.","author":"Li Kuan","year":"2023","unstructured":"Kuan Li, Yang Liu, Xiang Ao, and Qing He. 2023. Revisiting graph adversarial attack and defense from a data distribution perspective. In The Eleventh International Conference on Learning Representations."},{"key":"e_1_3_2_1_22_1","first-page":"462","article-title":"Spatiotemporal activity modeling via hierarchical cross-modal embedding","volume":"34","author":"Liu Yang","year":"2020","unstructured":"Yang Liu, Xiang Ao, Linfeng Dong, Chao Zhang, Jin Wang, and Qing He. 2020. Spatiotemporal activity modeling via hierarchical cross-modal embedding. IEEE Transactions on Knowledge and Data Engineering, Vol. 34, 1 (2020), 462-474.","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539483"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3580305.3599355"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3449989"},{"key":"e_1_3_2_1_26_1","volume-title":"Proximal Policy Optimization Algorithms. arXiv preprint arXiv:1707.06347","author":"Schulman John","year":"2017","unstructured":"John Schulman, Filip Wolski, Prafulla Dhariwal, Alec Radford, and Oleg Klimov. 2017. Proximal Policy Optimization Algorithms. arXiv preprint arXiv:1707.06347 (2017)."},{"key":"e_1_3_2_1_27_1","volume-title":"Collective classification in network data. AI magazine","author":"Sen Prithviraj","year":"2008","unstructured":"Prithviraj Sen, Galileo Namata, Mustafa Bilgic, Lise Getoor, Brian Galligher, and Tina Eliassi-Rad. 2008. Collective classification in network data. AI magazine, Vol. 29, 3 (2008), 93."},{"key":"e_1_3_2_1_28_1","first-page":"7693","article-title":"Adversarial attack and defense on graph data: A survey","volume":"35","author":"Sun Lichao","year":"2022","unstructured":"Lichao Sun, Yingtong Dou, Carl Yang, Kai Zhang, Ji Wang, S Yu Philip, Lifang He, and Bo Li. 2022. Adversarial attack and defense on graph data: A survey. IEEE Transactions on Knowledge and Data Engineering, Vol. 35, 8 (2022), 7693-7711.","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"e_1_3_2_1_29_1","volume-title":"Graph Attention Networks. In International Conference on Learning Representations (ICLR).","author":"Petar","year":"2018","unstructured":"Petar Veli?kovi?, Guillem Cucurull, Arantxa Casanova, Adriana Romero, Pietro Lio, and Yoshua Bengio. 2018. Graph Attention Networks. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_30_1","volume-title":"Deep Graph Library: Towards Efficient and Scalable Deep Learning on Graphs. ICLR Workshop on Representation Learning on Graphs and Manifolds (2019","author":"Wang Minjie","year":"2019","unstructured":"Minjie Wang, Lingfan Yu, Da Zheng, Quan Gan, Yu Gai, Zihao Ye, Mufei Li, Jinjing Zhou, Qi Huang, Chao Ma, Ziyue Huang, Qipeng Guo, Hao Zhang, Haibin Lin, Junbo Zhao, Jinyang Li, Alexander J Smola, and Zheng Zhang. 2019. Deep Graph Library: Towards Efficient and Scalable Deep Learning on Graphs. ICLR Workshop on Representation Learning on Graphs and Manifolds (2019). https:\/\/arxiv.org\/abs\/1909.01315"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.2978386"},{"key":"e_1_3_2_1_32_1","first-page":"1523","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Xi Zhaohan","year":"2021","unstructured":"Zhaohan Xi, Ren Pang, Shouling Ji, and Ting Wang. 2021. Graph backdoor. In 30th USENIX Security Symposium (USENIX Security 21). 1523-1540."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2025\/70"},{"key":"e_1_3_2_1_34_1","volume-title":"International Conference on Algorithms and Architectures for Parallel Processing. Springer, 163-180","author":"Yang Xiao","year":"2023","unstructured":"Xiao Yang, Gaolei Li, Xiaoyi Tao, Chaofeng Zhang, and Jianhua Li. 2023. Black-box graph backdoor defense. In International Conference on Algorithms and Architectures for Parallel Processing. Springer, 163-180."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i12.33433"},{"key":"e_1_3_2_1_36_1","volume-title":"Gnnguard: Defending graph neural networks against adversarial attacks. Advances in neural information processing systems","author":"Zhang Xiang","year":"2020","unstructured":"Xiang Zhang and Marinka Zitnik. 2020. Gnnguard: Defending graph neural networks against adversarial attacks. Advances in neural information processing systems, Vol. 33 (2020), 9263-9275."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3450569.3463560"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671910"},{"key":"e_1_3_2_1_39_1","volume-title":"Robustness-Inspired Defense Against Backdoor Attacks on Graph Neural Networks. ICLR","author":"Zhang Zhiwei","year":"2025","unstructured":"Zhiwei Zhang, Minhua Lin, Junjie Xu, Zongyu Wu, Enyan Dai, and Suhang Wang. 2025. Robustness-Inspired Defense Against Backdoor Attacks on Graph Neural Networks. ICLR (2025)."},{"key":"e_1_3_2_1_40_1","volume-title":"Graph neural networks: A review of methods and applications. AI open","author":"Zhou Jie","year":"2020","unstructured":"Jie Zhou, Ganqu Cui, Shengding Hu, Zhengyan Zhang, Cheng Yang, Zhiyuan Liu, Lifeng Wang, Changcheng Li, and Maosong Sun. 2020. Graph neural networks: A review of methods and applications. AI open, Vol. 1 (2020), 57-81."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.xinn.2021.100176"},{"key":"e_1_3_2_1_42_1","volume-title":"Graphvite: A high-performance cpu-gpu hybrid system for node embedding. 2494-2504.","author":"Zhu Zhaocheng","year":"2019","unstructured":"Zhaocheng Zhu, Shizhen Xu, Jian Tang, and Meng Qu. 2019. Graphvite: A high-performance cpu-gpu hybrid system for node embedding. 2494-2504."}],"event":{"name":"WWW '26: The ACM Web Conference 2026","location":"Dubai United Arab Emirates","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM Web Conference 2026"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3774904.3792507","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T07:56:37Z","timestamp":1783151797000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3774904.3792507"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,12]]},"references-count":42,"alternative-id":["10.1145\/3774904.3792507","10.1145\/3774904"],"URL":"https:\/\/doi.org\/10.1145\/3774904.3792507","relation":{},"subject":[],"published":{"date-parts":[[2026,4,12]]},"assertion":[{"value":"2026-04-12","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}