{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T16:03:38Z","timestamp":1780589018332,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":66,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"German Research Foundation (DFG)","award":["545047250"],"award-info":[{"award-number":["545047250"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1145\/3779208.3806086","type":"proceedings-article","created":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T15:21:58Z","timestamp":1780586518000},"page":"405-421","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["ADAGE: Active Defenses Against GNN Extraction"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9900-4081","authenticated-orcid":false,"given":"Jing","family":"Xu","sequence":"first","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Saarland, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2111-2234","authenticated-orcid":false,"given":"Franziska","family":"Boenisch","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Saarland, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9786-2296","authenticated-orcid":false,"given":"Adam","family":"Dziedzic","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Saarland, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,4]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1088\/1742-5468\/2008\/10\/P10008"},{"key":"e_1_3_2_1_3_1","volume-title":"2015 2nd international conference on computing for sustainable global development (INDIACom). IEEE, 1323\u20131327","author":"Rao Chintalapudi S","year":"2015","unstructured":"S Rao Chintalapudi and MHM Krishna Prasad. 2015. A survey on community detection algorithms in large scale real world networks. In 2015 2nd international conference on computing for sustainable global development (INDIACom). IEEE, 1323\u20131327."},{"key":"e_1_3_2_1_4_1","volume-title":"Proceedings of the 19th ACM SIGKDD international conference on Knowledge discovery and data mining. 1007\u20131015","author":"Ciglan Marek","year":"2013","unstructured":"Marek Ciglan, Michal Laclav\u00edk, and Kjetil N\u00f8rv\u00e5g. 2013. On community detection in real-world networks and the importance of degree assortativity. In Proceedings of the 19th ACM SIGKDD international conference on Knowledge discovery and data mining. 1007\u20131015."},{"key":"e_1_3_2_1_5_1","volume-title":"Mark EJ Newman, and Cristopher Moore","author":"Clauset Aaron","year":"2004","unstructured":"Aaron Clauset, Mark EJ Newman, and Cristopher Moore. 2004. Finding community structure in very large networks. Physical review E 70, 6 (2004), 066111."},{"key":"e_1_3_2_1_6_1","volume-title":"Adversarial model extraction on graph neural networks. arXiv preprint arXiv:1912.07721","author":"DeFazio David","year":"2019","unstructured":"David DeFazio and Arti Ramesh. 2019. Adversarial model extraction on graph neural networks. arXiv preprint arXiv:1912.07721 (2019)."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3411903"},{"key":"e_1_3_2_1_8_1","volume-title":"The Sybil Attack. In International Workshop on Peer-to-Peer Systems. https:\/\/www.cs.cornell.edu\/people\/egs\/714-spring05\/sybil.pdf","author":"Douceur John R.","year":"2002","unstructured":"John R. Douceur. 2002. The Sybil Attack. In International Workshop on Peer-to-Peer Systems. https:\/\/www.cs.cornell.edu\/people\/egs\/714-spring05\/sybil.pdf"},{"key":"e_1_3_2_1_9_1","volume-title":"Thirty-seventh Conference on Neural Information Processing Systems.","author":"Dubi\u0144ski Jan","year":"2023","unstructured":"Jan Dubi\u0144ski, Stanis\u0142aw Pawlak, Franziska Boenisch, Tomasz Trzcinski, and Adam Dziedzic. 2023. Bucks for Buckets (B4B): Active Defenses Against Stealing Encoders. In Thirty-seventh Conference on Neural Information Processing Systems."},{"key":"e_1_3_2_1_10_1","volume-title":"International Conference on Machine Learning.","author":"Dziedzic Adam","year":"2022","unstructured":"Adam Dziedzic, Nikita Dhawan, Muhammad Ahmad Kaleem, Jonas Guan, and Nicolas Papernot. 2022. On the Difficulty of Defending Self-Supervised Learning against Model Extraction. In International Conference on Machine Learning."},{"key":"e_1_3_2_1_11_1","volume-title":"Nikita Dhawan, Jonas Guan, Yannis Cattan, Franziska Boenisch, and Nicolas Papernot.","author":"Dziedzic Adam","year":"2022","unstructured":"Adam Dziedzic, Haonan Duan, Muhammad Ahmad Kaleem, Nikita Dhawan, Jonas Guan, Yannis Cattan, Franziska Boenisch, and Nicolas Papernot. 2022. Dataset Inference for Self-Supervised Models. In NeurIPS (Neural Information Processing Systems)."},{"key":"e_1_3_2_1_12_1","volume-title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work. In International Conference on Learning Representations. https:\/\/arxiv.org\/abs\/2201","author":"Dziedzic Adam","year":"2022","unstructured":"Adam Dziedzic, Muhammad Ahmad Kaleem, Yu Shen Lu, and Nicolas Papernot. 2022. Increasing the Cost of Model Extraction with Calibrated Proof of Work. In International Conference on Learning Representations. https:\/\/arxiv.org\/abs\/2201.09243"},{"key":"e_1_3_2_1_13_1","unstructured":"Facebook. [n. d.]. About looklike audiences. https:\/\/www.facebook.com\/business\/help\/164749007013531."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"Wenqi Fan Yao Ma Qing Li Yuan He Eric Zhao Jiliang Tang and Dawei Yin. 2019. Graph neural networks for social recommendation. In The worldwide web conference. 417\u2013426.","DOI":"10.1145\/3308558.3313488"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/276675.276685"},{"key":"e_1_3_2_1_16_1","volume-title":"Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572","author":"Goodfellow Ian J","year":"2014","unstructured":"Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. 2014. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)."},{"key":"e_1_3_2_1_17_1","volume-title":"Large Language Models Merging for Enhancing the Link Stealing Attack on Graph Neural Networks. arXiv preprint arXiv:2412.05830","author":"Guan Faqian","year":"2024","unstructured":"Faqian Guan, Tianqing Zhu, Wenhan Chang, Wei Ren, and Wanlei Zhou. 2024. Large Language Models Merging for Enhancing the Link Stealing Attack on Graph Neural Networks. arXiv preprint arXiv:2412.05830 (2024)."},{"key":"e_1_3_2_1_18_1","volume-title":"Inductive representation learning on large graphs. Advances in neural information processing systems 30","author":"Hamilton Will","year":"2017","unstructured":"Will Hamilton, Zhitao Ying, and Jure Leskovec. 2017. Inductive representation learning on large graphs. Advances in neural information processing systems 30 (2017)."},{"key":"e_1_3_2_1_19_1","volume-title":"Fedgraphnn: A federated learning system and benchmark for graph neural networks. arXiv preprint arXiv:2104.07145","author":"He Chaoyang","year":"2021","unstructured":"Chaoyang He, Keshav Balasubramanian, Emir Ceyani, Carl Yang, Han Xie, Lichao Sun, Lifang He, Liangwei Yang, Philip S Yu, Yu Rong, et al. 2021. Fedgraphnn: A federated learning system and benchmark for graph neural networks. arXiv preprint arXiv:2104.07145 (2021)."},{"key":"e_1_3_2_1_20_1","volume-title":"Neil Zhenqiang Gong, and Yang Zhang","author":"He Xinlei","year":"2021","unstructured":"Xinlei He, Jinyuan Jia, Michael Backes, Neil Zhenqiang Gong, and Yang Zhang. 2021. Stealing links from graph neural networks. In 30th USENIX security symposium (USENIX security 21). 2669\u20132686."},{"key":"e_1_3_2_1_21_1","volume-title":"Strategies for pre-training graph neural networks. arXiv preprint arXiv:1905.12265","author":"Hu Weihua","year":"2019","unstructured":"Weihua Hu, Bowen Liu, Joseph Gomes, Marinka Zitnik, Percy Liang, Vijay Pande, and Jure Leskovec. 2019. Strategies for pre-training graph neural networks. arXiv preprint arXiv:1905.12265 (2019)."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3411987"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/3489212.3489288"},{"key":"e_1_3_2_1_24_1","volume-title":"USENIX Security Symposium","author":"Jia Hengrui","year":"2021","unstructured":"Hengrui Jia, C. A. Choquette-Choo, V. Chandrasekaran, and N. Papernot. 2021. Entangled Watermarks as a Defense against Model Extraction. USENIX Security Symposium (2021)."},{"key":"e_1_3_2_1_25_1","volume-title":"Proof-of-Learning: Definitions and Practice. arXiv preprint arXiv:2103.05633","author":"Jia Hengrui","year":"2021","unstructured":"Hengrui Jia, Mohammad Yaghini, Christopher A Choquette-Choo, Natalie Dullerud, Anvith Thudi, Varun Chandrasekaran, and Nicolas Papernot. 2021. Proof-of-Learning: Definitions and Practice. arXiv preprint arXiv:2103.05633 (2021)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00085"},{"key":"e_1_3_2_1_28_1","volume-title":"Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907","author":"Kipf Thomas N","year":"2016","unstructured":"Thomas N Kipf and Max Welling. 2016. Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907 (2016)."},{"key":"e_1_3_2_1_29_1","volume-title":"Kipf and Max Welling","author":"Thomas","year":"2017","unstructured":"Thomas N. Kipf and Max Welling. 2017. Semi-Supervised Classification with Graph Convolutional Networks. In ICLR."},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining.","author":"Lin Minhua","year":"2025","unstructured":"Minhua Lin, Enyan Dai, Junjie Xu, Jinyuan Jia, Xiang Zhang, and Suhang Wang. 2025. Stealing Training Graphs from Graph Neural Networks. In Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560586"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00059"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2857705.2857725"},{"key":"e_1_3_2_1_34_1","volume-title":"Proceedings of ICLR 2021: 9th International Conference on Learning Representationsn.","author":"Maini Pratyush","year":"2021","unstructured":"Pratyush Maini, Mohammad Yaghini, and Nicolas Papernot. 2021. Dataset inference: Ownership resolution in machine learning. In Proceedings of ICLR 2021: 9th International Conference on Learning Representationsn."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2766462.2767755"},{"key":"e_1_3_2_1_36_1","volume-title":"Real 'Sybil'Admits Multiple Personalities Were Fake. National Public Radio. NPR 20","author":"Neary Lynn","year":"2011","unstructured":"Lynn Neary. 2011. Real 'Sybil'Admits Multiple Personalities Were Fake. National Public Radio. NPR 20 (2011)."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"e_1_3_2_1_38_1","volume-title":"Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks. In International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=SyevYxHtDB","author":"Orekondy Tribhuvanesh","year":"2020","unstructured":"Tribhuvanesh Orekondy, Bernt Schiele, and Mario Fritz. 2020. Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks. In International Conference on Learning Representations. https:\/\/openreview.net\/forum?id=SyevYxHtDB"},{"key":"e_1_3_2_1_39_1","volume-title":"International Joint Conference on Artificial Intelligence 2016","author":"Pan Shirui","year":"2016","unstructured":"Shirui Pan, Jia Wu, Xingquan Zhu, Chengqi Zhang, and Yang Wang. 2016. Triparty deep network representation. In International Joint Conference on Artificial Intelligence 2016. Association for the Advancement of Artificial Intelligence (AAAI), 1895\u20131901."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"crossref","first-page":"4694","DOI":"10.1038\/s41598-024-55190-7","article-title":"Community detection with greedy modularity disassembly strategy","volume":"14","author":"Rustamaji Heru Cahya","year":"2024","unstructured":"Heru Cahya Rustamaji, Wisnu Ananta Kusuma, Sri Nurdiati, and Irmanida Batubara. 2024. Community detection with greedy modularity disassembly strategy. Scientific Reports 14, 1 (2024), 4694.","journal-title":"Scientific Reports"},{"key":"e_1_3_2_1_42_1","volume-title":"Collective classification in network data. AI magazine 29, 3","author":"Sen Prithviraj","year":"2008","unstructured":"Prithviraj Sen, Galileo Namata, Mustafa Bilgic, Lise Getoor, Brian Galligher, and Tina Eliassi-Rad. 2008. Collective classification in network data. AI magazine 29, 3 (2008), 93\u201393."},{"key":"e_1_3_2_1_43_1","volume-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. 16373\u201316383","author":"Sha Zeyang","year":"2023","unstructured":"Zeyang Sha, Xinlei He, Ning Yu, Michael Backes, and Yang Zhang. 2023. Can't steal? Cont-steal! Contrastive stealing attacks against image encoders. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. 16373\u201316383."},{"key":"e_1_3_2_1_44_1","volume-title":"Pitfalls of graph neural network evaluation. arXiv","author":"Shchur Oleksandr","year":"2018","unstructured":"Oleksandr Shchur, Maximilian Mumme, Aleksandar Bojchevski, and Stephan G\u00fcnnemann. 2018. Pitfalls of graph neural network evaluation. arXiv 2018. arXiv preprint arXiv:1811.05868 (2018)."},{"key":"e_1_3_2_1_45_1","volume-title":"2022 IEEE Symposium on Security and Privacy (SP). IEEE, 1175\u20131192","author":"Shen Yun","year":"2022","unstructured":"Yun Shen, Xinlei He, Yufei Han, and Yang Zhang. 2022. Model stealing attacks against inductive graph neural networks. In 2022 IEEE Symposium on Security and Privacy (SP). IEEE, 1175\u20131192."},{"key":"e_1_3_2_1_46_1","article-title":"Weisfeiler-lehman graph kernels","volume":"12","author":"Shervashidze Nino","year":"2011","unstructured":"Nino Shervashidze, Pascal Schweitzer, Erik Jan Van Leeuwen, Kurt Mehlhorn, and Karsten M Borgwardt. 2011. Weisfeiler-lehman graph kernels. Journal of Machine Learning Research 12, 9 (2011).","journal-title":"Journal of Machine Learning Research"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/214"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330885"},{"key":"e_1_3_2_1_49_1","volume-title":"Social computing, behavioral modeling, and prediction","author":"Steinhaeuser Karsten","unstructured":"Karsten Steinhaeuser and Nitesh V Chawla. 2008. Community detection in a large real-world social network. In Social computing, behavioral modeling, and prediction. Springer, 168\u2013175."},{"key":"e_1_3_2_1_50_1","unstructured":"Christian Szegedy Wojciech Zaremba Ilya Sutskever Joan Bruna Dumitru Erhan Ian Goodfellow and Rob Fergus. 2014. Intriguing properties of neural networks. (2014). https:\/\/openreview.net\/forum?id=kklr_MTHMRQjG"},{"key":"e_1_3_2_1_51_1","volume-title":"25th USENIX security symposium (USENIX Security 16). 601\u2013618.","author":"Tram\u00e8r Florian","unstructured":"Florian Tram\u00e8r, Fan Zhang, Ari Juels, Michael K Reiter, and Thomas Ristenpart. 2016. Stealing machine learning models via prediction {APIs}. In 25th USENIX security symposium (USENIX Security 16). 601\u2013618."},{"key":"e_1_3_2_1_52_1","volume-title":"Graph attention networks. arXiv preprint arXiv:1710.10903","author":"Veli\u010dkovi\u0107 Petar","year":"2017","unstructured":"Petar Veli\u010dkovi\u0107, Guillem Cucurull, Arantxa Casanova, Adriana Romero, Pietro Lio, and Yoshua Bengio. 2017. Graph attention networks. arXiv preprint arXiv:1710.10903 (2017)."},{"key":"e_1_3_2_1_53_1","volume-title":"Graph Attention Networks. ICLR","author":"Veli\u010dkovi\u0107 Petar","year":"2018","unstructured":"Petar Veli\u010dkovi\u0107, Guillem Cucurull, Arantxa Casanova, Adriana Romero, Pietro Li\u00f2, and Yoshua Bengio. 2018. Graph Attention Networks. ICLR (2018). https:\/\/openreview.net\/forum?id=rJXMpikCZ"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.5555\/1756006.1859891"},{"key":"e_1_3_2_1_55_1","volume-title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings. arXiv preprint arXiv:2304.08566","author":"Waheed Asim","year":"2023","unstructured":"Asim Waheed, Vasisht Duddu, and N Asokan. 2023. GrOVe: Ownership Verification of Graph Neural Networks using Embeddings. arXiv preprint arXiv:2304.08566 (2023)."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"crossref","unstructured":"Xiao Wang Houye Ji Chuan Shi Bai Wang Yanfang Ye Peng Cui and Philip S Yu. 2019. Heterogeneous graph attention network. In The world wide web conference. 2022\u20132032.","DOI":"10.1145\/3308558.3313562"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3497753"},{"key":"e_1_3_2_1_58_1","volume-title":"2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P). IEEE, 1179\u20131197","author":"Xu Jing","year":"2023","unstructured":"Jing Xu, Stefanos Koffas, O\u011fuzhan Ersoy, and Stjepan Picek. 2023. Watermarking graph neural networks based on backdoor attacks. In 2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P). IEEE, 1179\u20131197."},{"key":"e_1_3_2_1_59_1","volume-title":"How powerful are graph neural networks? arXiv preprint arXiv","author":"Xu Keyulu","year":"1810","unstructured":"Keyulu Xu, Weihua Hu, Jure Leskovec, and Stefanie Jegelka. 2018. How powerful are graph neural networks? arXiv preprint arXiv 1810.00826 (2018)."},{"key":"e_1_3_2_1_60_1","volume-title":"Hierarchical graph representation learning with differentiable pooling. Advances in neural information processing systems 31","author":"Ying Zhitao","year":"2018","unstructured":"Zhitao Ying, Jiaxuan You, Christopher Morris, Xiang Ren, Will Hamilton, and Jure Leskovec. 2018. Hierarchical graph representation learning with differentiable pooling. Advances in neural information processing systems 31 (2018)."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3246766"},{"key":"e_1_3_2_1_62_1","volume-title":"Link prediction based on graph neural networks. Advances in neural information processing systems 31","author":"Zhang Muhan","year":"2018","unstructured":"Muhan Zhang and Yixin Chen. 2018. Link prediction based on graph neural networks. Advances in neural information processing systems 31 (2018)."},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11782"},{"key":"e_1_3_2_1_64_1","volume-title":"Proceedings of the 32nd ACM International Conference on Multimedia. 4947\u20134956","author":"Zhang Yuxing","year":"2024","unstructured":"Yuxing Zhang, Siyuan Meng, Chunchun Chen, Mengyao Peng, Hongyan Gu, and Xinli Huang. 2024. LinkThief: Combining Generalized Structure Knowledge with Node Similarity for Link Stealing Attack against GNN. In Proceedings of the 32nd ACM International Conference on Multimedia. 4947\u20134956."},{"key":"e_1_3_2_1_65_1","volume-title":"2021 9th International Symposium on Digital Forensics and Security (ISDFS). IEEE, 1\u20136.","author":"Zhao Xiangyu","year":"2021","unstructured":"Xiangyu Zhao, Hanzhou Wu, and Xinpeng Zhang. 2021. Watermarking graph neural networks by random graphs. In 2021 9th International Symposium on Digital Forensics and Security (ISDFS). IEEE, 1\u20136."},{"key":"e_1_3_2_1_66_1","first-page":"1766","article-title":"Transfer learning of graph neural networks with ego-graph information maximization","volume":"34","author":"Zhu Qi","year":"2021","unstructured":"Qi Zhu, Carl Yang, Yidan Xu, Haonan Wang, Chao Zhang, and Jiawei Han. 2021. Transfer learning of graph neural networks with ego-graph information maximization. Advances in Neural Information Processing Systems 34 (2021), 1766\u20131779.","journal-title":"Advances in Neural Information Processing Systems"}],"event":{"name":"ASIA CCS '26: ACM Asia Conference on Computer and Communications Security","location":"Bangalore India","acronym":"ASIA CCS '26","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3779208.3806086","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T15:44:34Z","timestamp":1780587874000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3779208.3806086"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":66,"alternative-id":["10.1145\/3779208.3806086","10.1145\/3779208"],"URL":"https:\/\/doi.org\/10.1145\/3779208.3806086","relation":{},"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"2026-06-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}